The vulnerabilities of Cisco Immune, Cisco Advanced Malware Protection for Endpoints for Windows, and the ClamAV for Windows antivirus software are related to errors in the mechanism for checking paths to dynamically linked libraries. These errors allow attackers to execute arbitrary code.

The vulnerabilities of Cisco Immune, Cisco Advanced Malware Protection for Endpoints for Windows, and the ClamAV for Windows antivirus software are related to errors in the mechanism for checking paths to dynamically loaded libraries. Exploiting these vulnerabilities allows an attacker to execute...

Security fix for the ALT Linux 9 package clamav version 0.103.2-alt1

0.103.2-alt1 built April 12, 2021 Sergey Y. Afonin in task 268496 April 10, 2021 Sergey Y. Afonin - 0.103.2 + CVE-2021-1252, CVE-2021-1405 - 0.103.0 and 0.103.1 only. + CVE-2021-1404 - 0.103.1 and prior...

Denial Of Service (DoS)

clamav is vulnerable to denial of service. An unauthenticated remote attacker is able to cause a denial of service condition in the application via a malicious Excel file due to improper error handling that may result in an infinite loop...

DLL Hijacking

clamav is vulnerable to DLL hijacking. The vulnerability is due to insufficient validation of directory search paths at run time. An attacker could exploit this vulnerability by placing a malicious DLL file on an affected system. A successful exploit could allow the attacker to execute arbitrary...

Denial Of Service (DoS)

clamav is vulnerable to denial of service. An unauthenticated remote attacker is able to cause a denial of service condition in the application via a malicious PDF file due to improper error handling that may result in an infinite loop...

Security fix for the ALT Linux 10 package clamav version 0.103.2-alt1

April 10, 2021 Sergey Y. Afonin 0.103.2-alt1 - 0.103.2 + CVE-2021-1252, CVE-2021-1405 - 0.103.0 and 0.103.1 only. + CVE-2021-1404 - 0.103.1 and prior...

Fedora: Security Advisory for clamav (FEDORA-2021-bedb7cc66e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for clamav (FEDORA-2021-bedb7cc66e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 33 Update: clamav-0.103.2-1.fc33

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

ALPINE-CVE-2021-1405

A vulnerability in the email parsing module in Clam AntiVirus ClamAV Software version 0.103.1 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper variable initialization that may...

DEBIAN-CVE-2021-1404

A vulnerability in the PDF parsing module in Clam AntiVirus ClamAV Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper buffer size tracking that may result in a hea...

ALPINE-CVE-2021-1404

A vulnerability in the PDF parsing module in Clam AntiVirus ClamAV Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper buffer size tracking that may result in a hea...

DEBIAN-CVE-2021-1252

A vulnerability in the Excel XLM macro parsing module in Clam AntiVirus ClamAV Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper error handling that may result in...

CVE-2021-1405

A vulnerability in the email parsing module in Clam AntiVirus ClamAV Software version 0.103.1 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper variable initialization that may...

UBUNTU-CVE-2021-1252

A vulnerability in the Excel XLM macro parsing module in Clam AntiVirus ClamAV Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper error handling that may result in...

UBUNTU-CVE-2021-1404

A vulnerability in the PDF parsing module in Clam AntiVirus ClamAV Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper buffer size tracking that may result in a hea...

UBUNTU-CVE-2021-1405

A vulnerability in the email parsing module in Clam AntiVirus ClamAV Software version 0.103.1 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper variable initialization that may...

CVE-2021-1404

CVE-2021-1404 affects ClamAV’s PDF parsing (versions 0.103.0 and 0.103.1). The issue is a heap buffer over-read caused by improper buffer size tracking, triggered by processing a crafted PDF, which can crash the ClamAV scanning process and cause a denial of service. Connected sources confirm this...

CVE-2021-1405

CVE-2021-1405 affects ClamAV (email parsing module) and was caused by improper variable initialization leading to a NULL pointer read. An unauthenticated, remote attacker could send a crafted email to trigger a crash of the ClamAV scanning process, yielding a denial of service. Affected product/v...

CVE-2021-1252

CVE-2021-1252 is a vulnerability in ClamAV’s Excel XLM macro parsing module. Affected versions: 0.103.0 and 0.103.1. Root cause: improper error handling may trigger an infinite loop, allowing an unauthenticated, remote attacker to cause the ClamAV scanning process to hang and produce a denial of ...