CVE-2018-0360: Integer Overflow
ClamAV before 0.100.1 has an HWP integer overflow with a resultant infinite loop via a crafted Hangul Word Processor file. This is in parsehwp3paragraph() in libclamav/hwp.c.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2018-0360.
What is the severity of CVE-2018-0360?
The severity of CVE-2018-0360 is medium with a severity value of 5.5.
What is the affected software for CVE-2018-0360?
The affected software for CVE-2018-0360 is ClamAV versions before 0.100.1, with specific versions for Debian and Ubuntu.
How can I fix CVE-2018-0360?
To fix CVE-2018-0360, update ClamAV to version 0.100.1 or higher.
Where can I find more information about CVE-2018-0360?
You can find more information about CVE-2018-0360 at the following references: [SecurityTracker](http://www.securitytracker.com/id/1041367), [ClamAV Blog](https://blog.clamav.net/2018/07/clamav-01001-has-been-released.html), [Debian LTS Announce](https://lists.debian.org/debian-lts-announce/2018/08/msg00020.html).