Denial of Service Vulnerability in ClamAV AntiVirus Software

CVE-2017-12379

Summary

ClamAV AntiVirus software versions 0.99.2 and earlier contain a vulnerability that could allow an unauthenticated, remote attacker to trigger a denial of service condition or potentially execute arbitrary code. This vulnerability arises from insufficient input validation during the message parsing process. An attacker could exploit the flaw by sending a specially crafted email designed to initiate a buffer overflow in the message handling function, which may result in the compromise of the affected system's stability or security.

References