CVEs affecting projects tracked on Release Alert, from NVD & OSV.
The wwunpack function in libclamav/wwunpack.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (use-after-free) via a crafted PE file with WWPack compression.
ChocolateyClamAV is an open-source (GPL) anti-virus engine used in a variety of situations, including email and web scanning, and endpoint security. It provides many utilities for users, including a flexible and scalable multi-threaded daemon, a command-line scanner and an advanced tool for automatic database updates.
## Features
* Command-line scanner.
* Milter interface for sendmail.
* Advanced database updater with support for scripted updates and digital signatures.
* Virus database updated multiple times per day.
* Built-in support for all standard mail file formats.
* Built-in support for various archive formats, including ZIP, RAR, Dmg, Tar, GZIP, BZIP2, OLE2, Cabinet, CHM, BinHex, SIS and others.
* Built-in support for ELF executables and Portable Executable files packed with UPX, FSG, Petite, NsPack, wwpack32, MEW, Upack and obfuscated with SUE, Y0da Cryptor and others.
* Built-in support for popular document formats, including MS Office and MacOffice files, HTML, Flash, RTF and PDF.
## Notes
* This is an automatically updated package. If you find it is out of date by more than a week, please contact the maintainer(s), to let the know the package is no longer updating, using:
* The 'Contact Maintainers' link on the package page, or
* The 'Package Source' link on the package page and raising an issue.
GitHub
RubyGems