Exploitation Summary
EIP tracks 1 public exploit for CVE-2008-5314. PoCs published by ilja van sprundel.
AI-analyzed exploit summary This exploit triggers a recursive stack overflow in ClamAV's JPEG parsing code by creating a malformed JPEG file with nested thumbnails, causing a segmentation fault and crashing the application. The PoC generates a file that forces ClamAV to recursively scan thumbnails without bounds, exhausting stack memory.
Description
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted JPEG file, related to the cli_check_jpeg_exploit, jpeg_check_photoshop, and jpeg_check_photoshop_8bim functions.
Exploits (1)
This exploit triggers a recursive stack overflow in ClamAV's JPEG parsing code by creating a malformed JPEG file with nested thumbnails, causing a segmentation fault and crashing the application. The PoC generates a file that forces ClamAV to recursively scan thumbnails without bounds, exhausting stack memory.