CVE:CVE-2013-2020
CNNVD:CNNVD-201305-020
Clam AntiVirus（ClamAV）是ClamAV团队开发的一套免费且开源的杀毒软件。该软件用于检测木马、病毒、恶意软件和其他恶意威胁。
ClamAV 0.97.8之前的版本中的pe.c中的‘cli_scanpe’函数中存在整数溢出漏洞。远程攻击者可通过过渡偏离的偏移值大于UPX压缩包可执行文件中的PE部分大小，造成越边界读取利用该漏洞造成拒绝服务（崩溃）。
solution:Upgrade canonical ubuntu_linux to a higher version than 10.04,11.10,12.04,12.10,13.04,and avoid the version 10.04,11.10,12.04,12.10,13.04; Upgrade suse linux_enterprise_server to a higher version than 11.0:sp1,11.0:sp2,and avoid the version 11.0:sp1,11.0:sp2; Upgrade clamav clamav to a higher version than 0.97.7,0.9:rc1,0.90,0.90:rc1,0.90:rc1.1,0.90:rc2,0.90:rc3,0.90.1,0.90.1_p0,0.90.2,0.90.2_p0,0.90.3,0.90.3_p0,0.90.3_p1,0.91,0.91:rc1,0.91:rc2,0.91.1,0.91.2,0.91.2_p0,0.92,0.92.1,0.92_p0,0.93,0.93.1,0.93.2,0.93.3,0.94,0.94.1,0.94.2,0.95,0.95:rc1,0.95:rc2,0.95:src1,0.95:src2,0.95.1,0.95.2,0.95.3,0.96,0.96:rc1,0.96:rc2,0.96.1,0.96.2,0.96.3,0.96.4,0.96.5,0.97,0.97:rc,0.97.1,0.97.2,0.97.3,0.97.4,0.97.5,and avoid the version (,0.97.7],0.9:rc1,0.90,0.90:rc1,0.90:rc1.1,0.90:rc2,0.90:rc3,0.90.1,0.90.1_p0,0.90.2,0.90.2_p0,0.90.3,0.90.3_p0,0.90.3_p1,0.91,0.91:rc1,0.91:rc2,0.91.1,0.91.2,0.91.2_p0,0.92,0.92.1,0.92_p0,0.93,0.93.1,0.93.2,0.93.3,0.94,0.94.1,0.94.2,0.95,0.95:rc1,0.95:rc2,0.95:src1,0.95:src2,0.95.1,0.95.2,0.95.3,0.96,0.96:rc1,0.96:rc2,0.96.1,0.96.2,0.96.3,0.96.4,0.96.5,0.97,0.97:rc,0.97.1,0.97.2,0.97.3,0.97.4,0.97.5