Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value.

More... (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-0314)