Vulnerabilities in ClamAV leading to remote code execution and system file leakage
Cisco has released new versions of the free antivirus package ClamAV 1.0.1, 0.105.3, and 0.103.8, addressing a critical vulnerability (CVE-2023-20032) that could allow code execution when scanning HFS+ formatted disk images in ClamAV. The vulnerability is caused by insufficient buffer size checking, allowing data to be written outside the buffer and […]
