ClamAV is prone to a denial-of-service vulnerability because it fails to properly bounds-check specially crafted PDF files. An attacker can exploit this issue to cause denial-of-service conditions. Due to the nature of this issue, arbitrary code execution may be possible this has not been confirmed. ClamAV 0.96.2 is vulnerable other versions may also be affected.

Updates are available. Please see the references for more information.

• http://comments.gmane.org/gmane.comp.security.oss.general/3547
• http://www.clamav.net/
• https://www.securityfocus.com/bid/43555

---

Updated on 2017-03-28