CVE-2016-1371
ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted mew packer executable.
Date published : 2016-10-03
http://www.securityfocus.com/bid/93222
http://blog.clamav.net/2016/05/clamav-0992-has-been-released.html