CVE-2008-0318

CVE-2008-0318 describes an integer overflow in the cli_scanpe function of ClamAV versions prior to 0.92.1, specifically impacting the libclamav library. This vulnerability, triggered by a crafted Petite packed PE file, allows remote attackers to cause a denial of service and potentially execute arbitrary code through a heap-based buffer overflow. With a CVSS score of 10.0, it represents a critical risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.