CVE-2019-1789

ClamAV versions prior to 0.101.2 are susceptible to a denial of service (DoS) vulnerability. An out-of-bounds heap read condition may occur when scanning PE files. An example is Windows EXE and DLL files that have been packed using Aspack as a result of inadequate bound-checking.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@cisco.com

Published

2019-11-05

Last modified

2024-11-19

Weaknesses

CWE-125, CWE-20

Affected products

• Clamav (Cisco)
• Clamav (Clamav)

References

• https://blog.clamav.net/2019/03/clamav-01012-and-01003-patches-have.html