CVE-2010-4261

Name	CVE-2010-4261
Description	Off-by-one error in the icon_cb function in pe_icons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
clamav (PTS)	bookworm	1.4.3+dfsg-1~deb12u2	fixed
	trixie	1.4.3+dfsg-1	fixed
	forky, sid	1.4.6+dfsg-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
clamav	source	lenny	(not affected)
clamav	source	(unstable)	0.96.5+dfsg-1

[lenny] - clamav <not-affected> (icon extractor not yet present)
Fixed in 1f3db7f074995bd4e1d0183b2db8b1c472d2f41b