CVE-2008-3215
Fixed in a distro release EPSS 5%
libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access. NOTE: this issue exists because of an incomplete fix for CVE-2008-2713.
Products: clam_anti-virus clamav
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | clamav | 0.93.1.dfsg-1.1 |
| Debian 13 | clamav | 0.93.1.dfsg-1.1 |
| Debian 14 | clamav | 0.93.1.dfsg-1.1 |
| Debian 4.0 | clamav | 0.90.1dfsg-3.1etch14 |