SUSE Security Announcement SUSE-SA:2006:046 – Damian Put discovered a bug in the UPX decoder used for scanning UPX compressed Windows executables. The bug allows for a heap buffer overflow and may potentially be exploitable to execute arbitrary code. ClamAV has been version updated to version 0.88.4 in order to fix this problem.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/49228/SUSE-SA-2006-046.txt
Source: https://packetstormsecurity.com/files/49228/SUSE-SA-2006-046.txt.html