ClamAV PeSpin and Archives Processing Multiple Vulnerabilities

Multiple vulnerabilities have been identified in ClamAV (Clam AntiVirus), which could be exploited by attackers or malware to cause a denial of service or compromise a vulnerable system.

1. Due to a heap overflow error in "libclamav/spin.c" when processing malformed PeSpin executable files, which could be exploited by attackers to execute arbitrary commands by tricking a vulnerable application into scanning a specially crafted file.

2. Due to an error when processing malformed ARJ archives, which could be exploited to cause an affected application to exhaust all available memory resources.

3. Due to an errors when processing malformed RAR archives, which could be exploited to cause an affected application to crash, creating a denial of service condition.