CVE-2020-37167
HIGHClamAV/ClamBC < 0.103.0-rc - Code Injection via ClamBC Bytecode Function Name Manipulation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-37167. PoCs published by anonymous.
AI-analyzed exploit summary This exploit targets a vulnerability in ClamAV's bytecode interpreter (ClamBC) by crafting a malicious bytecode file. The PoC constructs a header, types, APIs, and globals to trigger the vulnerability, likely leading to arbitrary code execution.
Description
ClamAV versions prior to 0.103.0-rc contain a vulnerability in function name processing through the ClamBC bytecode interpreter that allows attackers to manipulate bytecode function names. Attackers can exploit the weak input validation in function name encoding to potentially execute malicious bytecode or cause unexpected behavior in the ClamAV engine.
Exploits (1)
This exploit targets a vulnerability in ClamAV's bytecode interpreter (ClamBC) by crafting a malicious bytecode file. The PoC constructs a header, types, APIs, and globals to trigger the vulnerability, likely leading to arbitrary code execution.
References (5)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H