Loading
Generated remediation guidance and an executive summary. No account required.
Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow.
Use CWE-119, Clam Anti-Virus vendor hub and Clamav product page to widen CVE-2008-5050 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2008-1100, CVE-2008-1833 and CVE-2008-0314 for nearby disclosures in the same product family.