ClamAV up to 0.93 CHM Archive resource management

A vulnerability was found in ClamAV up to 0.93 (Anti-Malware Software). It has been rated as critical. This issue affects an unknown function of the component CHM Archive Handler. Upgrading to version 0.94 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at svn.clamav.net. The best possible mitigation is suggested to be upgrading to the latest version. A possible mitigation has been published 2 weeks after the disclosure of the vulnerability. Furthermore it is possible to detect and prevent this kind of attack with TippingPoint and the filter 8885.