CVE-2007-3725
The RAR VM (unrarvm.c) in Clam Antivirus (ClamAV) before 0.91 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted RAR archive, resulting in a NULL pointer dereference.
Date published : 2007-07-12
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
http://www.securityfocus.com/archive/1/473371/100/0/threaded