CVE-2017-12380

Name of the Vulnerable Software and Affected Versions: ClamAV AntiVirus software versions 0.99.2 and prior

Description: The issue is caused by improper input validation checking mechanisms in the mbox.c file during certain mail parsing functions. An unauthenticated, remote attacker could exploit this by sending a crafted email, triggering a NULL pointer dereference condition when the email is scanned, potentially resulting in a denial of service (DoS) condition.

Recommendations: For ClamAV AntiVirus software versions 0.99.2 and prior, update to a version later than 0.99.2 to resolve the issue. As a temporary workaround, consider restricting the receipt of emails from untrusted sources to minimize the risk of exploitation.