CVE-2011-3627

CVE-2011-3627 describes a denial-of-service vulnerability in ClamAV versions prior to 0.97.3, specifically within its bytecode engine. An unauthenticated remote attacker can exploit this flaw by crafting malicious input that triggers excessive recursion, leading to a crash of the ClamAV service. While the attack complexity is medium, the impact is limited to availability, with no compromise of confidentiality or integrity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.