Description
Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Advisories 2
- DSA-776-1 clamav - integer overflows, infinite loop Debian Security (DSA / DLA) · Mar 9, 2026
- DTSA-3-1 clamav - denial of service and privilege escalation Debian Security (DSA / DLA) · Mar 9, 2026
References
- SUSE-SR:2005:018 vendor-advisory
- GLSA-200507-25 vendor-advisory
- 18258 vdb-entry
- 16250 third-party-advisory
- 16180 third-party-advisory
- 20050725 ClamAV Multiple Rem0te Buffer Overflows mailing-list
- 18259 vdb-entry
- 16229 third-party-advisory
- CLSA-2005:987 vendor-advisory
- 16296 third-party-advisory
- 18257 vdb-entry
- 16458 third-party-advisory
- clam-antivirus-file-format-gain-access(21555) vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=344514
- 14359 vdb-entry