Description
ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted (1) Yoda's crypter or (2) mew packer file, related to a "heap out of bounds condition."
References (8)
Core 8
Core References
Third Party Advisory vendor-advisory
x_refsource_gentoo
https://security.gentoo.org/glsa/201512-08
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00014.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id/1031672
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148950.html
Vendor Advisory x_refsource_confirm
http://blog.clamav.net/2015/01/clamav-0986-has-been-released.html
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00020.html
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148958.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/62536
Scores
EPSS
0.0279
EPSS Percentile
84.7%
Details
CWE
CWE-119
Status
published
Products (3)
clamav/clamav
< 0.98.5
fedoraproject/fedora
20
fedoraproject/fedora
21
Published
Feb 03, 2015
Tracked Since
Feb 18, 2026