tocsin

Debian/clamav: unknown

Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow.

Action: Upgrade clamav to 0.92~dfsg-1~volatile2 or later.

Affected

introducedfixedlast affected
00.92~dfsg-1~volatile2-

Fixed versions

0.92~dfsg-1~volatile2

Sources

published · modified · JSON