CVE-2017-6420

CVE-2017-6420 describes a use-after-free vulnerability in ClamAV versions 0.99.2 and earlier, specifically within the wwunpack function. An attacker could exploit this by providing a specially crafted PE file with WWPack compression, leading to a denial of service. Rated Medium severity (CVSS 5.5), this vulnerability requires local access or user interaction (e.g., opening a malicious file) and primarily impacts availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion beyond a single mention.