| Package | Affected versions | Patched versions |
|---|---|---|
| clamav | < 0.90.3 | 0.90.3 |
The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) via an OLE2 file with (1) a large property size or (2) a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free