Gentoo Linux Security Advisory GLSA 200604-06 – ClamAV contains format string vulnerabilities in the logging code (CVE-2006-1615). Furthermore Damian Put discovered an integer overflow in ClamAV’s PE header parser (CVE-2006-1614) and David Luyer discovered that ClamAV can be tricked into performing an invalid memory access (CVE-2006-1630). Versions less than 0.88.1 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45375/glsa-200604-06.txt
Source: https://packetstormsecurity.com/files/45375/Gentoo-Linux-Security-Advisory-200604-6.html