libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713.
| Software | From | Fixed in |
|---|---|---|
| clam_anti-virus / clamav | 0.88.2 | 0.88.2.x |
| clam_anti-virus / clamav | 0.88.4 | 0.88.4.x |
| clam_anti-virus / clamav | 0.88.5 | 0.88.5.x |
| clam_anti-virus / clamav | 0.88.6 | 0.88.6.x |
| clam_anti-virus / clamav | 0.88.7 | 0.88.7.x |
| clam_anti-virus / clamav | 0.88.7-p0 | 0.88.7-p0.x |
| clam_anti-virus / clamav | 0.88.7-p1 | 0.88.7-p1.x |
| clam_anti-virus / clamav | 0.90 | 0.90.x |
| clam_anti-virus / clamav | 0.90.1 | 0.90.1.x |
| clam_anti-virus / clamav | 0.90.1-p0 | 0.90.1-p0.x |
| clam_anti-virus / clamav | 0.90.2 | 0.90.2.x |
| clam_anti-virus / clamav | 0.90.2-p0 | 0.90.2-p0.x |
| clam_anti-virus / clamav | 0.90.3 | 0.90.3.x |
| clam_anti-virus / clamav | 0.90.3-p0 | 0.90.3-p0.x |
| clam_anti-virus / clamav | 0.90.3-p1 | 0.90.3-p1.x |
| clam_anti-virus / clamav | 0.91.2-p0 | 0.91.2-p0.x |
| clam_anti-virus / clamav | 0.92-p0 | 0.92-p0.x |
| clam_anti-virus / clamav | 0.92.1 | 0.92.1.x |
| clam_anti-virus / clamav | 0.93 | 0.93.x |