Remote Code Execution Vulnerability in ClamAV AntiVirus Software

CVE-2017-12374

Summary

ClamAV AntiVirus software versions up to 0.99.2 are impacted by a vulnerability resulting from inadequate input validation during mail parsing operations. Specifically, the issue arises during the processing of bounce messages in the mbox.c file, where an unauthenticated remote attacker can exploit this weakness. Successfully executing this attack could cause a use-after-free condition, leading to potential service disruptions, including a denial of service on affected devices.

References