CVE:CVE-2012-1458
CNNVD:CNNVD-201203-421
ClamAV 0.96.4版本与Sophos Anti-Virus 4.61.0版本的Microsoft CHM文件解析器中存在漏洞。远程攻击者可利用该漏洞借助CHM文件的LZXC头的特制复位间隔，绕过恶意软件检测。
solution:Upgrade clamav clamav to a higher version than 0.96.4,and avoid the version 0.96.4; Upgrade sophos sophos_anti-virus to a higher version than 4.61.0,and avoid the version 4.61.0