| Package | Affected versions | Patched versions |
|---|---|---|
| clamav | = 0.90= 0.90.1= 0.90_rc1.1= 0.90_rc2= 0.90_rc3= 0.90rc1= 0.91= 0.92 |
The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free