NVD

Id
38136  
Name
CVE-2013-2020  
Description
Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-05-13  
Modified Date
2015-09-28  
Seq
2013-2020  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194961 38136 CVE-2013-2020 http://blog.clamav.net/2013/04/clamav-0978-has-been-released.html  View
194962 38136 CVE-2013-2020 APPLE-SA-2013-09-12-1  View
194963 38136 CVE-2013-2020 APPLE-SA-2013-09-17-1  View
194964 38136 CVE-2013-2020 FEDORA-2013-10853  View
194965 38136 CVE-2013-2020 FEDORA-2013-10953  View
194966 38136 CVE-2013-2020 FEDORA-2013-10980  View
194967 38136 CVE-2013-2020 FEDORA-2013-8047  View
194968 38136 CVE-2013-2020 SUSE-SU-2014:1571  View
194969 38136 CVE-2013-2020 openSUSE-SU-2013:0881  View
194970 38136 CVE-2013-2020 openSUSE-SU-2013:0883  View
194971 38136 CVE-2013-2020 http://support.apple.com/kb/HT5880  View
194972 38136 CVE-2013-2020 http://support.apple.com/kb/HT5892  View
194973 38136 CVE-2013-2020 MDVSA-2013:159  View
194974 38136 CVE-2013-2020 [oss-security] 20130424 Re: Multiple potential security issues fixed in ClamAV 0.97.8 - any further details?  View
194975 38136 CVE-2013-2020 [oss-security] 20130429 Re: Multiple potential security issues fixed in ClamAV 0.97.8 - any further details?  View
194976 38136 CVE-2013-2020 59434  View
194977 38136 CVE-2013-2020 USN-1816-1  View
194978 38136 CVE-2013-2020 https://bugzilla.clamav.net/show_bug.cgi?id=7055  View
194979 38136 CVE-2013-2020 https://github.com/vrtadmin/clamav-devel/commit/270e368b99e93aa5447d46c797c92c3f9f39f375  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21074 JVNDB-2013-002649 ClamAV の pe.c における整数アンダーフローの脆弱性 ClamAV の pe.c の cli_scanpe 関数には、整数アンダーフローの脆弱性が存在します。 CVE-2013-2020 61962 CVE-2013-2020 38136 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002649.html 2013-04-23 2013-10-09 View