| Package | Affected versions | Patched versions |
|---|---|---|
| clamav | = 0.83= 0.84_rc1= 0.84_rc2= 0.85= 0.85.1 |
The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a cabinet (CAB) file with the cffile_FolderOffset field set to 0xff, which causes a zero-length read.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free