Two vulnerabilities have been reported in Clam AntiVirus, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.

1) An out-of-bounds memory access error in the CHM (Compressed HTML Help) unpacker in chmunpack.c can be exploited to crash the virus scanning service via a specially crafted CHM file.

2) An integer overflow error in rebuildpe.c when rebuilding PE files after unpacking can be exploited to cause a heap-based buffer overflow via a specially crafted executable.

Successful exploitation of this vulnerability may allow execution of arbitrary code.

The vulnerabilities are reported in version 0.88.4. Prior versions may also be affected.

Solution
Update to version 0.88.5.

Provided and/or discovered by
Discovered by an anonymous person and Damian Put and reported via iDefense Labs.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Clam AntiVirus:
http://sourceforge.net/project/shownotes.php?release_id=455799

iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=422
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=423

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers