ClamAV scans on our application servers are identifying some of our legitimate Flex .swf files as malicious, specifically citing CVE-2015-5548 (specifically, "Swf.Exploit.CVE_2015_5548 FOUND"). Relevant CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5548
Best I can tell, this is a vulnerability with Flash player itself, which we don't even have installed server-side. Any idea why Clam is reporting this?