CVE-2018-0360

ClamAV before 0.100.1 has an HWP integer overflow with a resultant infinite loop via a crafted Hangul Word Processor file. This is in parsehwp3paragraph in libclamav/hwp.c...

PT-2018-8787

Name of the Vulnerable Software and Affected Versions ClamAV versions prior to 0.100.1 Description The issue is related to an integer overflow in the HWP parser, which can cause an infinite loop when processing a crafted Hangul Word Processor file. This occurs in the parsehwp3 paragraph function...