| Package | Affected versions | Patched versions |
|---|---|---|
| clamav | < 0.100.1 | 0.100.1 |
ClamAV before 0.100.1 has an HWP integer overflow with a resultant infinite loop via a crafted Hangul Word Processor file. This is in parsehwp3_paragraph() in libclamav/hwp.c.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free