CVE-2008-6680: Clamav

Medium severity, CVSS 5.0. EPSS: 3.7% chance of exploitation in the next 30 days.

libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (crash) via a crafted EXE file that triggers a divide-by-zero error.

Affected products

• Clamav Clamav: up to and including 0.94.2; version 0.93.1 only; version 0.94 only; version 0.94.1 only

Published 2009-04-08. Last modified 2026-06-16.