An issue was discovered in ClamXAV 3 before 3.1.1. A malicious actor could use a properly signed copy of ClamXAV 2 (running with an injected malicious dylib) to communicate with ClamXAV 3s helper tool and perform privileged operations. This occurs because of inadequate client verification in the helper tool.
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Clamxav | Clamxav | 3.0.0 (including) | 3.1.1 (excluding) |