Security comments regarding the way clamav sets up VirusEvent information and how it could be improved. Due to a lack of input sanitizing, the variable taken in on the command line could be used for malicious purposes when put to a system().
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/32977/clamVE.txt
Source: https://packetstormsecurity.com/files/32977/clamVE.txt.html