Detections
Analytics
ClamAV < 0.96.3 DoS
medium Nessus Network Monitor Plugin ID 5672
Synopsis
The remote host is vulnerable to a denial of service attack.Description
Versions of ClamAV earlier than 0.96.3 are potentially affected by a denial-of-service vulnerability because the application fails to properly handle specially crafted PDF files. An attacker, exploiting this flaw, can crash the affected service.Solution
Upgrade to ClamAV 0.96.3 or later.See Also
https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2226
http://git.clamav.net/gitweb?p=clamav-devel.git;a=blob_plain;f=ChangeLog;hb=clamav-0.96.3
Plugin Details
Severity: Medium
ID: 5672
Family: Web Clients
Published: 9/28/2010
Updated: 3/6/2019
Nessus ID: 49712
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 4.1
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS v3
Risk Factor: Medium
Base Score: 5.3
Temporal Score: 4.9
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:cisco:clamav
Patch Publication Date: 9/20/2010
Vulnerability Publication Date: 9/20/2010
Reference Information
CVE: CVE-2010-0405, CVE-2010-3434