CVE-2014-9050
Fixed in a distro release EPSS 5%
Heap-based buffer overflow in the cli_scanpe function in libclamav/pe.c in ClamAV before 0.98.5 allows remote attackers to cause a denial of service (crash) via a crafted y0da Crypter PE file.
Products: clamav
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | clamav | 0.98.5+dfsg-1 |
| Debian 13 | clamav | 0.98.5+dfsg-1 |
| Debian 14 | clamav | 0.98.5+dfsg-1 |
| Debian 6.0 | clamav | 0.98.1+dfsg-1+deb6u4 |
| Ubuntu 14.04 LTS | clamav | 0.98.5+addedllvm-0ubuntu0.14.04.1 |
| openSUSE Tumbleweed | clamav | 1.4.2-1.1 |