CVE-2013-2020

Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset…

published May 13, 2013

CVSS
—
EPSS
4%
Percentile
89.2
In the wild
Unconfirmed
What it is

Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03547 · 89.2th percentile
Published
2013-05-13T23:00Z
EPSS history
Timeline
  • 13 MAY 23:00Z
    Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset…
    cvelistv5