CVE-2014-9328
ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upack packer file, related to a "heap out of bounds condition."
Date published : 2015-02-03
http://www.securityfocus.com/bid/72372
http://blog.clamav.net/2015/01/clamav-0986-has-been-released.html