It was discovered that the Microsoft Office processing code in libclamav improperly handled certain Visual Basic for Applications (VBA) data This could allow a remote attacker to craft a document that could crash clamav or possibly execute arbitrary code