Update of the ClamAV antivirus package 1.4.2 and 1.0.8 addressing vulnerabilities.
Cisco has released new versions of the free antivirus package ClamAV 1.4.2 and 1.0.8, which fix a vulnerability (CVE-2025-20128). The vulnerability is caused by a buffer overflow in the code that parses files containing OLE2 (Object Linking and Embedding 2) content, which could be exploited by an unauthenticated remote attacker to cause a denial of service. The issue has been present since the release of ClamAV 1.0.0 and was identified in […]
