Denial of Service Vulnerability in ClamAV by Cisco
CVE-2018-0202
Key Information:
Badges
What is CVE-2018-0202?
ClamAV versions earlier than 0.99.4 contain a vulnerability that can be exploited by unauthenticated remote attackers, potentially causing a denial of service (DoS). This issue arises from inadequate input validation mechanisms when handling specially crafted Portable Document Format (.pdf) files. An attacker could send a maliciously constructed .pdf file that triggers an out-of-bounds read during scanning by ClamAV. This vulnerability particularly affects the pdf_parse_array and pdf_parse_string functions within libclamav/pdfng.c, which can disrupt normal operations and lead to service unavailability.
Affected Version(s)
ClamAV ClamAV
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.