ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upx packer file, related to a "heap out of bounds condition."
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "0.98.6+dfsg-0ubuntu0.14.04.1",
"binary_name": "clamav"
},
{
"binary_version": "0.98.6+dfsg-0ubuntu0.14.04.1",
"binary_name": "clamav-base"
},
{
"binary_version": "0.98.6+dfsg-0ubuntu0.14.04.1",
"binary_name": "clamav-daemon"
},
{
"binary_version": "0.98.6+dfsg-0ubuntu0.14.04.1",
"binary_name": "clamav-docs"
},
{
"binary_version": "0.98.6+dfsg-0ubuntu0.14.04.1",
"binary_name": "clamav-freshclam"
},
{
"binary_version": "0.98.6+dfsg-0ubuntu0.14.04.1",
"binary_name": "clamav-milter"
},
{
"binary_version": "0.98.6+dfsg-0ubuntu0.14.04.1",
"binary_name": "clamav-testfiles"
},
{
"binary_version": "0.98.6+dfsg-0ubuntu0.14.04.1",
"binary_name": "libclamav-dev"
},
{
"binary_version": "0.98.6+dfsg-0ubuntu0.14.04.1",
"binary_name": "libclamav6"
}
]
}