Clamav: >> Clamav >> 0.90.1_p0 Security Vulnerabilities
The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption."
CVSS Score
10.0
EPSS Score
0.016
Published
2008-02-12
The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) via an OLE2 file with (1) a large property size or (2) a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file.
CVSS Score
4.3
EPSS Score
0.04
Published
2007-05-14
Page 7