ClamAV vulnerabilities

Releases

• Ubuntu 13.04
• Ubuntu 12.10
• Ubuntu 12.04
• Ubuntu 11.10
• Ubuntu 10.04

Packages

• clamav - Anti-virus utility for Unix

Details

It was discovered that ClamAV would incorrectly parse a UPX-packed
executable, leading to possible inappropriate heap reads. An attacker
could use this issue to cause ClamAV to crash, resulting in a denial of
service, or possibly execute arbitrary code. (CVE-2013-2020)

It was discovered that ClamAV would incorrectly parse a PDF document,
potentially writing beyond the size of a static array. An attacker could
use this issue to cause ClamAV to crash, resulting in a denial of service,
or possibly execute arbitrary code. (CVE-2013-2021)