CVE-2013-2020: Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cau...

Security readout for executives and security teams

CVE-2013-2020 can crash ClamAV when it scans a specially malformed UPX-packed Windows executable. The business impact is loss of malware-scanning availability, especially on mail gateways, file upload pipelines, or servers relying on ClamAV before 0.97.8. Exposure is most likely where ClamAV before 0.97.8 scans untrusted files, including email attachments, web uploads, shared storage, or automated malware-scanning workflows. Vendor-packaged ClamAV builds should be checked against distro advisories. Prioritize remediation on systems where ClamAV processes internet-supplied files. This is not shown as actively exploited, but scanner crashes can interrupt security controls and create operational blind spots. Mitigation focus: Upgrade ClamAV to 0.97.8 or a vendor-fixed package.; Apply relevant Ubuntu, Fedora, SUSE, Apple, or other OS vendor updates.; Check vendor guidance if running embedded or appliance-packaged ClamAV..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.