CVE:CVE-2005-2920
CNNVD:CNNVD-200509-172
Clam AntiVirus（ClamAV）是ClamAV团队开发的一套免费且开源的杀毒软件。该软件用于检测木马、病毒、恶意软件和其他恶意威胁。
Clam AntiVirus (ClamAV) 0.87之前版本中的libclamav/upx.c发生的缓冲区溢出允许远程攻击者通过伪造UPX压缩可执行文件来执行任意代码。
solution:Upgrade clam_anti-virus clamav to a higher version than 0.70,0.71,0.72,0.73,0.74,0.75,0.75.1,0.80,0.81,0.82,0.83,0.84,0.85,0.85.1,0.86,0.86.1,0.86.2,and avoid the version 0.70,0.71,0.72,0.73,0.74,0.75,0.75.1,0.80,0.81,0.82,0.83,0.84,0.85,0.85.1,0.86,0.86.1,0.86.2