The MS-Expand file handling in Clam AntiVirus (ClamAV) before 0.86 allows remote attackers to cause a denial of service (file descriptor and memory consumption) via a crafted file that causes repeated errors in the cli_msexpand function.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Clamav | Clam_anti-virus | 0.81 (including) | 0.81 (including) |
| Clamav | Clam_anti-virus | 0.82 (including) | 0.82 (including) |
| Clamav | Clam_anti-virus | 0.83 (including) | 0.83 (including) |
| Clamav | Clam_anti-virus | 0.84_rc1 (including) | 0.84_rc1 (including) |
| Clamav | Clam_anti-virus | 0.84_rc2 (including) | 0.84_rc2 (including) |
| Clamav | Clam_anti-virus | 0.85 (including) | 0.85 (including) |
| Clamav | Clam_anti-virus | 0.85.1 (including) | 0.85.1 (including) |