| Package | Affected versions | Patched versions |
|---|---|---|
| clamav | = 0.01= 0.02= 0.03= 0.04= 0.05= 0.06= 0.10= 0.11= 0.12= 0.13= 0.14= 0.15= 0.20= 0.21= 0.22= 0.23= 0.24= 0.51= 0.52= 0.53= 0.54= 0.60= 0.60p= 0.65= 0.67= 0.68= 0.68.1= 0.70= 0.71= 0.72= 0.73= 0.74= 0.75= 0.75.1= 0.80= 0.80_rc1= 0.80_rc2= 0.80_rc3= 0.80_rc4= 0.81= 0.81_rc1= 0.82= 0.83= 0.84= 0.84_rc1= 0.84_rc2= 0.85= 0.85.1= 0.86= 0.86.1= 0.86.2= 0.86_rc1= 0.87= 0.87.1= 0.88= 0.88.1= 0.88.2= 0.88.3= 0.88.4= 0.88.5= 0.88.6= 0.88.7= 0.90= 0.90.1= 0.90.2= 0.90.3= 0.90_rc1.1= 0.90_rc2= 0.90_rc3= 0.90rc1= 0.91= 0.91.1= 0.91.2= 0.91rc1= 0.91rc2= 0.92= 0.92.1= 0.93= 0.93.1= 0.93.2= 0.93.3≤ 0.94 |
Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free