Ubuntu
clamav package

CVE-2008-1387 - ClamAV before 0.93 allows remote attackers to cause a denial of service (CPU consumption) via a crafted ARJ archive, as demonstrated by the PROTOS GENOME test suite for Archive Formats

Bug #223766 reported by stiV on 2008-04-28

This bug report is a duplicate of: Bug #217256: ClamAV Upack Processing Buffer Overflow Vulnerability. Edit Remove

254

Affects		Status	Importance	Assigned to	Milestone
	clamav (Ubuntu)	New	Undecided	Unassigned

Bug Description

Binary package hint: clamav

see CVE page for more info - this bug practically crashes clamd and renders eg. a mailserver useless. just by sending a bad email (happened to me today)

could be a duplicate of https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/218915 but i'm not sure - this really is a security issue, not something for a wishlist