CVE-2015-1463 | Vulnerability Database | Aqua Security

ClamAV before 0.98.6 allows remote attackers to cause a denial of service (crash) via a crafted petite packer file, related to an incorrect compiler optimization.

Affected Software

Name	Vendor	Start Version	End Version
Clamav	Clamav	*	0.98.5 (including)
Clamav	Ubuntu	lucid	*
Clamav	Ubuntu	precise	*
Clamav	Ubuntu	trusty	*
Clamav	Ubuntu	upstream	*
Clamav	Ubuntu	utopic	*

References

http://blog.clamav.net/2015/01/clamav-0986-has-been-released.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148950.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148958.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00014.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00020.html
https://security.gentoo.org/glsa/201512-08
http://blog.clamav.net/2015/01/clamav-0986-has-been-released.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148950.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148958.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00014.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00020.html
https://security.gentoo.org/glsa/201512-08

NVD	https://nvd.nist.gov/vuln/detail/CVE-2015-1463
CWE	https://cwe.mitre.org/data/definitions/17.html