A vulnerability has been reported in ClamAV, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in libclamav/chmunpack.c when processing malformed CHM files. This can be exploited to cause an invalid memory access via a specially crafted CHM file.

The vulnerability is reported in versions prior to 0.94. Other versions may also be affected.

Note: Various other issues, where some may be security related, were also fixed.

Solution
Update to version 0.94.

Provided and/or discovered by
Hanno Böck

Changelog
Further details available to Secunia VIM customers

Original Advisory
Hanno Böck:
http://int21.de/cve/CVE-2008-1389-clamav-chd.html

ClamAV:
http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog
https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1089

Deep Links
Links available to Secunia VIM customers