Input Validation Flaw in ClamAV AntiVirus Software Vulnerability

CVE-2017-12375

Summary

The ClamAV AntiVirus software prior to version 0.99.2 contains an input validation flaw in its email parsing functions that may allow an unauthenticated remote attacker to launch a denial of service (DoS) attack. By sending specifically crafted emails targeting the rfc2047 function within mbox.c, an attacker can trigger a buffer overflow during the scanning process, potentially incapacitating the affected device.

References