This host has ClamAV installed, and is prone to denial of service vulnerability.

A specially crafted VBA project when opened causes heap buffer overflow which can be exploited by attackers to execute arbitrary code on the system with clamd privileges or cause the application to crash. Impact Level: Application

Upgrade to ClamAV 0.94.1 http://www.clamav.net/

The flaw exists due to an off-by-one error in the function get_unicode_name() in libclamav/vba_extract.c

ClamAV before 0.94.1 on Linux

• http://secunia.com/advisories/32663
• http://sourceforge.net/project/shownotes.php?release_id=637952;group_id=86638
• http://www.frsirt.com/english/advisories/2008/3085
• http://xforce.iss.net/xforce/xfdb/46462

---

Updated on 2015-03-25