CVE-2008-1833

Description

Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary.

How to fix CVE-2008-1833

To remediate CVE-2008-1833, upgrade the affected package to a fixed version below.

• Debian/clamav—upgrade to 0.92.1~dfsg2-1.1 or later

Is CVE-2008-1833 being exploited?

Moderate — EPSS is 8.6%. Track this CVE but it's not at the top of the prioritisation list.

Affected packages (1)

• from 0, < 0.92.1~dfsg2-1.1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2008-1833