Debian Security Advisory 1680-1 – Moritz Jodeit discovered that ClamAV, an anti-virus solution, suffers from an off-by-one-error in its VBA project file processing, leading to a heap-based buffer overflow and potentially arbitrary code execution (CVE-2008-5050).
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/72616/dsa-1680-1.txt
Source: https://packetstormsecurity.com/files/72616/Debian-Linux-Security-Advisory-1680-1.html