A weakness and a vulnerability have been reported in ClamAV, which can be exploited by malicious people to bypass the scanning functionality or potentially compromise a vulnerable system.

1) An error when processing archives can be exploited to bypass the anti-virus scanning functionality via specially crafted CAB files.

2) An error exists within the "qtm_decompress()" function in libclamav/mspack.c. This can be exploited to cause a memory corruption when a specially crafted Quantum-compressed file is scanned.

Successful exploitation of this vulnerability may allow execution of arbitrary code.

The weakness and the vulnerability are reported in versions prior to 0.96.

Solution
Update to version 0.96.

Provided and/or discovered by
1) ReversingLabs Corp, reported via CERT-FI
2) Reported by Török Edwin in a ClamAV bug report.

Changelog
Further details available to Secunia VIM customers

Original Advisory
https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1826
https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1771

http://git.clamav.net/gitweb?p=clamav-devel.git;a=blob_plain;f=ChangeLog;hb=clamav-0.96

Deep Links
Links available to Secunia VIM customers