ROS-20230419-01

Vulnerability of HFS+ partition file analyzer of ClamAV antivirus software package is related to an operation exceeding the memory buffer boundaries.
operation beyond the memory buffer boundaries. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code.
remotely to execute arbitrary code

A vulnerability in the ClamAV scanning library is related to the possibility of replacing an XML entity, which may lead to the introduction of an external entity.
lead to the introduction of an external entity. Exploitation of the vulnerability could allow an attacker acting remotely to transmit arbitrary code to the antivirus.
remotely, to pass specially crafted XML code to the antivirus and view bytes from any file that
could be read by the ClamAV scanning process.