clamav

Page content
  • Author: voroskoi
  • Vulnerable: 0.88.5-1siwenna1
  • Unaffected: 0.88.7-1siwenna1

Hendrik Weimer has reported a vulnerability in Clam AntiVirus, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to a stack overflow when scanning messages with deeply nested multipart content. This can be exploited to crash the service by sending specially crafted emails to a vulnerable system.

CVEs: