Security Advisory

CVE-2008-5050

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2008-11-13 01:00:00

Last updated 2024-08-07 10:40:16

Assigner mitre

State PUBLISHED

Description

Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow.

← Browse all CVEs View on cve.org ↗