CVE-2013-2020

CVSS 5.0 - MEDIUM

Description

Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read.

Affected Products

50 of 60

Vendor	Product	Version
canonical	ubuntu_linux	`10.04`
canonical	ubuntu_linux	`11.10`
canonical	ubuntu_linux	`12.04`
canonical	ubuntu_linux	`12.10`
canonical	ubuntu_linux	`13.04`
suse	linux_enterprise_server	`11.0`
suse	linux_enterprise_server	`11.0`
clamav	clamav	`All versions`
clamav	clamav	`0.9`
clamav	clamav	`0.90`
clamav	clamav	`0.90`
clamav	clamav	`0.90`
clamav	clamav	`0.90`
clamav	clamav	`0.90`
clamav	clamav	`0.90.1`
clamav	clamav	`0.90.1_p0`
clamav	clamav	`0.90.2`
clamav	clamav	`0.90.2_p0`
clamav	clamav	`0.90.3`
clamav	clamav	`0.90.3_p0`
clamav	clamav	`0.90.3_p1`
clamav	clamav	`0.91`
clamav	clamav	`0.91`
clamav	clamav	`0.91`
clamav	clamav	`0.91.1`
clamav	clamav	`0.91.2`
clamav	clamav	`0.91.2_p0`
clamav	clamav	`0.92`
clamav	clamav	`0.92.1`
clamav	clamav	`0.92_p0`
clamav	clamav	`0.93`
clamav	clamav	`0.93.1`
clamav	clamav	`0.93.2`
clamav	clamav	`0.93.3`
clamav	clamav	`0.94`
clamav	clamav	`0.94.1`
clamav	clamav	`0.94.2`
clamav	clamav	`0.95`
clamav	clamav	`0.95`
clamav	clamav	`0.95`
clamav	clamav	`0.95`
clamav	clamav	`0.95`
clamav	clamav	`0.95.1`
clamav	clamav	`0.95.2`
clamav	clamav	`0.95.3`
clamav	clamav	`0.96`
clamav	clamav	`0.96`
clamav	clamav	`0.96`
clamav	clamav	`0.96.1`
clamav	clamav	`0.96.2`