Ubuntu Security Notice USN-684-1 – Ilja van Sprundel discovered that ClamAV did not handle recursive JPEG information. If a remote attacker sent a specially crafted JPEG file, ClamAV would crash, leading to a denial of service.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/72559/USN-684-1.txt
Source: https://packetstormsecurity.com/files/72559/Ubuntu-Security-Notice-684-1.html