CVEvulnerability

CVE-2014-9050

5.0 MEDIUM Published 2014-12-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-12-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-119

Description

Heap-based buffer overflow in the cli_scanpe function in libclamav/pe.c in ClamAV before 0.98.5 allows remote attackers to cause a denial of service (crash) via a crafted y0da Crypter PE file.

Affected configurations

• clamav clamav (<= 0.94.3) • clamav clamav 0.01 • clamav clamav 0.02 • clamav clamav 0.3 • clamav clamav 0.03 • clamav clamav 0.05 • clamav clamav 0.8 • clamav clamav 0.9 • clamav clamav 0.10 • clamav clamav 0.12 • clamav clamav 0.13 • clamav clamav 0.14 • clamav clamav 0.15 • clamav clamav 0.20 • clamav clamav 0.21 • clamav clamav 0.22 • clamav clamav 0.23 • clamav clamav 0.24 • clamav clamav 0.51 • clamav clamav 0.52 • clamav clamav 0.53 • clamav clamav 0.54 • clamav clamav 0.60 • clamav clamav 0.60p • clamav clamav 0.65 • clamav clamav 0.66 • clamav clamav 0.67 • clamav clamav 0.67-1 • clamav clamav 0.68 • clamav clamav 0.68.1 • clamav clamav 0.70 • clamav clamav 0.71 • clamav clamav 0.72 • clamav clamav 0.73 • clamav clamav 0.74 • clamav clamav 0.75 • clamav clamav 0.75.1 • clamav clamav 0.80 • clamav clamav 0.80 rc • clamav clamav 0.81 • clamav clamav 0.82 • clamav clamav 0.83 • clamav clamav 0.84 • clamav clamav 0.85 • clamav clamav 0.85.1 • clamav clamav 0.86 • clamav clamav 0.86.1 • clamav clamav 0.86.2 • clamav clamav 0.87 • clamav clamav 0.87.1 • clamav clamav 0.88 • clamav clamav 0.88.1 • clamav clamav 0.88.2 • clamav clamav 0.88.3 • clamav clamav 0.88.4 • clamav clamav 0.88.5 • clamav clamav 0.88.6 • clamav clamav 0.88.7 • clamav clamav 0.88.7 p0 • clamav clamav 0.88.7 p1 … and 22 more

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References