CVE-2016-1372
ClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service (application crash) via a crafted 7z file.
Date published : 2016-10-03
http://www.securityfocus.com/bid/93221
http://blog.clamav.net/2016/05/clamav-0992-has-been-released.html