CVE-2013-6497
Fixed in a distro release EPSS 1%
clamscan in ClamAV before 0.98.5, when using -a option, allows remote attackers to cause a denial of service (crash) as demonstrated by the jwplayer.js file.
Products: clamav
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | clamav | 0.98.5+dfsg-1 |
| Debian 13 | clamav | 0.98.5+dfsg-1 |
| Debian 14 | clamav | 0.98.5+dfsg-1 |
| Debian 6.0 | clamav | 0.98.1+dfsg-1+deb6u4 |
| Ubuntu 14.04 LTS | clamav | 0.98.5+addedllvm-0ubuntu0.14.04.1 |
| openSUSE Tumbleweed | clamav | 0.99.2-4.1 |