CVE-2011-3627: The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) vi...

Security readout for executives and security teams

CVE-2011-3627 is a denial-of-service flaw in ClamAV before 0.97.3. A specially formed scan target could crash the bytecode engine, interrupting antivirus scanning. The business impact is loss of scanning availability, especially on mail gateways, file upload pipelines, or systems that inspect untrusted content. Exposure is most likely where ClamAV before 0.97.3 scans attacker-supplied email, files, archives, or uploads. Current systems are unlikely to be affected unless they run very old ClamAV builds or unsupported distribution packages. Handle during normal vulnerability remediation, with higher priority for systems that scan external content. This is an availability issue in an old ClamAV release, with no source-provided evidence of active exploitation. Mitigation focus: Upgrade ClamAV to 0.97.3 or later.; Use supported Fedora, Ubuntu, or vendor packages containing the fix.; Prioritize internet-facing mail, upload, and file-scanning services..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.