tocsin

Debian/clamav: unknown

The chm_decompress_stream function in libclamav/chmunpack.c in Clam AntiVirus (ClamAV) before 0.90.2 leaks file descriptors, which has unknown impact and attack vectors involving a crafted CHM file, a

Action: Upgrade clamav to 0.90.2-1 or later.

Affected

introducedfixedlast affected
00.90.2-1-

Fixed versions

0.90.2-1

Sources

published · modified · JSON