tocsin

Debian/clamav: unknown

The parsing engine in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to bypass scanning via a RAR file with a header flag value of 10, which can be processed by WinRAR.

Action: Upgrade clamav to 0.90.3-1 or later.

Affected

introducedfixedlast affected
00.90.3-1-

Fixed versions

0.90.3-1

Sources

published · modified · JSON