A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of proper data handling mechanisms within the device buffer while indexing remaining file data on an affected device. An attacker could exploit this vulnerability by sending crafted PDF files to an affected device. A successful exploit could allow the attacker to cause a heap buffer out-of-bounds read condition, resulting in a crash that could result in a denial of service condition on an affected device.
History

Tue, 19 Nov 2024 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2019-04-08T19:10:16

Updated: 2024-11-19T19:12:23.014Z

Reserved: 2018-12-06T00:00:00

Link: CVE-2019-1787

cve-icon Vulnrichment

Updated: 2024-08-04T18:28:42.867Z

cve-icon NVD

Status : Modified

Published: 2019-04-08T19:29:05.540

Modified: 2024-11-21T04:37:22.823

Link: CVE-2019-1787

cve-icon Redhat

No data.