Buffer overflow in the cli_scanpe function in libclamav (libclamav/pe.c) for ClamAV 0.92 and 0.92.1 allows remote attackers to execute arbitrary code via a crafted Upack PE file.

More... (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1100)