CVE-2019-1788 - ClamAV OLE2 File Out-Of-Bounds Write Vulnerability

Back Back to CVE browser

MEDIUM

ClamAV OLE2 File Out-Of-Bounds Write Vulnerability

Published Apr 8, 2019

5.5

MEDIUM

CVSS 3.1

EPSS 1.84%

Description

A vulnerability in the Object Linking & Embedding (OLE2) file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a lack of proper input and validation checking mechanisms for OLE2 files sent an affected device. An attacker could exploit this vulnerability by sending malformed OLE2 files to the device running an affected version ClamAV Software. An exploit could allow the attacker to cause an out-of-bounds write condition, resulting in a crash that could result in a denial of service condition on an affected device.

Affected products

Vendor Cisco Product ClamAV Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <=0.101.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Cisco

ClamAV

n/a

Version	Status	Constraints
unspecified	affected	<=0.101.1

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-20

Improper Input Validation

CWE-787

Out-of-bounds Write

References (5)

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00062.html
vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00064.html
vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12166
x_refsource_MISCExploitIssue TrackingPatchThird Party Advisory
https://lists.debian.org/debian-lts-announce/2019/04/msg00019.html
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://security.gentoo.org/glsa/201904-12
vendor-advisoryx_refsource_GENTOOThird Party Advisory

Link	Providers	Tags
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00062.html		vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00064.html		vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12166		x_refsource_MISCExploitIssue TrackingPatchThird Party Advisory
https://lists.debian.org/debian-lts-announce/2019/04/msg00019.html		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://security.gentoo.org/glsa/201904-12		vendor-advisoryx_refsource_GENTOOThird Party Advisory