NVD

Id
299  
Name
CVE-2008-0318  
Description
Integer overflow in the cli_scanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-02-12  
Modified Date
2011-03-07  
Seq
2008-0318  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
2017 299 CVE-2008-0318 http://bugs.gentoo.org/show_bug.cgi?id=209915  View
2018 299 CVE-2008-0318 http://docs.info.apple.com/article.html?artnum=307562  View
2019 299 CVE-2008-0318 http://kolab.org/security/kolab-vendor-notice-19.txt  View
2020 299 CVE-2008-0318 20080212 ClamAV libclamav PE File Integer Overflow Vulnerability  View
2021 299 CVE-2008-0318 APPLE-SA-2008-03-18  View
2022 299 CVE-2008-0318 SUSE-SR:2008:004  View
2023 299 CVE-2008-0318 GLSA-200802-09  View
2024 299 CVE-2008-0318 1019394  View
2025 299 CVE-2008-0318 http://sourceforge.net/project/shownotes.php?release_id=575703  View
2026 299 CVE-2008-0318 http://support.novell.com/techcenter/psdb/512985d2cd3090bfb93dcb7b551179cf.html  View
2027 299 CVE-2008-0318 DSA-1497  View
2028 299 CVE-2008-0318 MDVSA-2008:088  View
2029 299 CVE-2008-0318 27751  View
2030 299 CVE-2008-0318 ADV-2008-0503  View
2031 299 CVE-2008-0318 ADV-2008-0606  View
2032 299 CVE-2008-0318 ADV-2008-0924  View
2033 299 CVE-2008-0318 FEDORA-2008-1608  View
2034 299 CVE-2008-0318 FEDORA-2008-1625  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45913 JVNDB-2008-001223 ClamAV の libclamav における整数オーバーフローの脆弱性 ClamAV の libclamav には cli_scanpe() 関数において、PE ファイルを圧縮した Petite の取り扱いに不備があるために、clamd を使用した際に整数オーバーフローが発生する脆弱性が存在します。 CVE-2008-0318 30431 CVE-2008-0318 299 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001223.html 2008-03-18 2008-04-10 View