Gentoo Linux Security Advisory GLSA 200604-06 - ClamAV contains format string vulnerabilities in the logging code (CVE-2006-1615). Furthermore Damian Put discovered an integer overflow in ClamAV's PE header parser (CVE-2006-1614) and David Luyer discovered that ClamAV can be tricked into performing an invalid memory access (CVE-2006-1630). Versions less than 0.88.1 are affected.
05d178755e2b98c9624042c77c220c15a46eb7eac0997653f076030f01373df0