CVE:CVE-2010-0098
CNNVD:CNNVD-201004-119
Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。
Clam的libclamav/mspack.c文件中的qtm_decompress()函数中存在内存破坏漏洞，在扫描特制的Quantum压缩CAB文件时就可以触发这个漏洞，导致应用程序崩溃。
solution:Upgrade clamav clamav to a higher version than *:rc2,0.01,0.02,0.3,0.03,0.05,0.9:rc1,0.10,0.12,0.13,0.14,0.14:pre,0.15,0.20,0.21,0.22,0.23,0.24,0.51,0.52,0.53,0.54,0.60,0.60p,0.65,0.66,0.67,0.67-1,0.68,0.68.1,0.70,0.70:rc,0.71,0.72,0.73,0.74,0.75,0.75.1,0.80,0.80:rc,0.80:rc2,0.80:rc3,0.80:rc4,0.81,0.82,0.83,0.84,0.84:rc1,0.84:rc2,0.85,0.85.1,0.86,0.86:rc1,0.86.1,0.86.2,0.87,0.87.1,0.88,0.88.1,0.88.2,0.88.3,0.88.4,0.88.5,0.88.6,0.88.7,0.90,0.90:rc1,0.90:rc1.1,0.90:rc2,0.90:rc3,0.90.1,0.90.2,0.90.3,0.91,0.91:rc1,0.91:rc2,0.91.1,0.91.2,0.92,0.92.1,0.93,0.93.1,0.93.2,0.93.3,0.94,0.94.1,0.94.2,0.95,0.95:rc1,0.95:rc2,0.95.1,0.95.2,0.95.3,0.96:rc1,and avoid the version *:rc2,0.01,0.02,0.3,0.03,0.05,0.9:rc1,0.10,0.12,0.13,0.14,0.14:pre,0.15,0.20,0.21,0.22,0.23,0.24,0.51,0.52,0.53,0.54,0.60,0.60p,0.65,0.66,0.67,0.67-1,0.68,0.68.1,0.70,0.70:rc,0.71,0.72,0.73,0.74,0.75,0.75.1,0.80,0.80:rc,0.80:rc2,0.80:rc3,0.80:rc4,0.81,0.82,0.83,0.84,0.84:rc1,0.84:rc2,0.85,0.85.1,0.86,0.86:rc1,0.86.1,0.86.2,0.87,0.87.1,0.88,0.88.1,0.88.2,0.88.3,0.88.4,0.88.5,0.88.6,0.88.7,0.90,0.90:rc1,0.90:rc1.1,0.90:rc2,0.90:rc3,0.90.1,0.90.2,0.90.3,0.91,0.91:rc1,0.91:rc2,0.91.1,0.91.2,0.92,0.92.1,0.93,0.93.1,0.93.2,0.93.3,0.94,0.94.1,0.94.2,0.95,0.95:rc1,0.95:rc2,0.95.1,0.95.2,0.95.3,0.96:rc1; Upgrade clamavs clamav to a higher version than 0.04,0.06,and avoid the version 0.04,0.06