ClamAV 0.99.3 Security Release: Fixes 7 High-Severity Vulnerabilities (CVE-2017-12374 to 12380)

Vulnerability Key Information ClamAV 0.99.3 Security Release CVE-2017-12374 Vulnerability Type: ClamAV UAF (use-after-free) vulnerability Affected Versions: 0.99.2 and earlier Risk Level: High Fix Description: Could allow unauthorized remote attackers to cause a denial of service (DoS) CVE-2017-12375 Vulnerability Type: ClamAV buffer overflow vulnerability Affected Versions: 0.99.2 and earlier Risk Level: High Fix Description: Could allow unauthorized remote attackers to cause a denial of service (DoS) CVE-2017-12376 Vulnerability Type: ClamAV buffer overflow vulnerability when processing .pdfname Affected Versions: 0.99.2 and earlier Risk Level: High Fix Description: Could allow unauthorized remote attackers to cause a denial of service (DoS) or execute arbitrary code CVE-2017-12377 Vulnerability Type: ClamAV heap overflow vulnerability when processing Mew Packet Affected Versions: 0.99.2 and earlier Risk Level: High Fix Description: Could allow unauthorized remote attackers to cause a denial of service (DoS) or execute arbitrary code CVE-2017-12378 Vulnerability Type: ClamAV buffer over-read vulnerability when processing .tar files Affected Versions: 0.99.2 and earlier Risk Level: High Fix Description: Could allow unauthorized remote attackers to cause a denial of service (DoS) CVE-2017-12379 Vulnerability Type: ClamAV buffer overflow vulnerability in the messageAddArgument function Affected Versions: 0.99.2 and earlier Risk Level: High Fix Description: Could allow unauthorized remote attackers to cause a denial of service (DoS) or execute arbitrary code CVE-2017-12380 Vulnerability Type: ClamAV null pointer dereference vulnerability Affected Versions: 0.99.2 and earlier Risk Level: High Fix Description: Could allow unauthorized remote attackers to cause a denial of service (DoS) Additional Information All ClamAV users are advised to upgrade to version 0.99.3 The fix also includes several minor issues For updates, please refer to: http://www.clamav.net/downloads

Goal Reached Thanks to every supporter — we hit 100%!

ClamAV 0.99.3 Security Release: Fixes 7 High-Severity Vulnerabilities (CVE-2017-12374 to 12380)