This host has ClamAV installed and is prone to denial of service vulnerability.

Successful exploitation will allow attackers to provide a message with specially-crafted hash signature in it, leading to denial of service (clamscan executable crash). Impact Level: Application

Upgrade to ClamAV 0.97.2 or later, For updates refer to http://www.clamav.net/lang/en/

The flaw is due to the way the hash manager of Clam AntiVirus scans messages with certain hashes.

ClamAV version prior to 0.97.2 (3.0.3.6870) on Windows.

• http://secunia.com/advisories/45382
• http://www.openwall.com/lists/oss-security/2011/07/26/3
• http://xforce.iss.net/xforce/xfdb/68785

---

Updated on 2015-03-25