Mandriva Security Advisory – Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consumption and failed scans) via CAB archives with a cabinet header record length of zero, which causes a function to return without closing a file descriptor. Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the id MIME header parameter in a multi-part message.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/54524/MDKSA-2007-043.txt
Source: https://packetstormsecurity.com/files/54524/Mandriva-Linux-Security-Advisory-2007.043.html