CVE-2017-6419

Name of the Vulnerable Software and Affected Versions libmspack version 0.5alpha ClamAV version 0.99.2

Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer overflow and application crash, or possibly have other unspecified impacts. This is achieved through a crafted CHM file.

Recommendations For libmspack version 0.5alpha, consider updating to a newer version that addresses the issue. For ClamAV version 0.99.2, update to a version that incorporates the fix for libmspack. As a temporary workaround, consider restricting the processing of CHM files until a patch is available.