CVE-2008-1100: Clam Anti-Virus Clamav

High severity, CVSS 10.0. EPSS: 10.9% chance of exploitation in the next 30 days.

Buffer overflow in the cli_scanpe function in libclamav (libclamav/pe.c) for ClamAV 0.92 and 0.92.1 allows remote attackers to execute arbitrary code via a crafted Upack PE file.

Affected products

• Clam Anti-Virus Clamav: version 0.92 only; version 0.92.1 only

Published 2008-04-14. Last modified 2026-06-16.