Launchpad.net

CVE 2014-9328

ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upack packer file, related to a "heap out of bounds condition."

See the CVE page on Mitre.org for more details.