CVE-2008-1100

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 10.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-04-14 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the cli_scanpe function in libclamav (libclamav/pe.c) for ClamAV 0.92 and 0.92.1 allows remote attackers to execute arbitrary code via a crafted Upack PE file.

Affected products

Clam Anti-Virus Clamav: 0.92, 0.92.1

References

http://kolab.org/security/kolab-vendor-notice-20.txt
http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html
http://lists.opensuse.org/opensuse-updates/2015-05/msg00024.html
http://secunia.com/advisories/29000
http://secunia.com/advisories/29863
http://secunia.com/advisories/29886
http://secunia.com/advisories/29891
http://secunia.com/advisories/29975
http://secunia.com/advisories/30253
http://secunia.com/advisories/30328
http://secunia.com/advisories/31882

Get alerted when CVE-2008-1100 or the next vulnerability affects your stack