Denial of Service Vulnerability in Cisco
Indian – Computer Emergency Response Team (cert-in.org.in)
Severity Rating: CRITICAL
Secure Endpoint Connector for Windows
Secure Endpoint Private Cloud
A Vulnerability has been reported in OLE2 file format parser of ClamAV which could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This Vulnerability exists in OLE2 file format parser of ClamAV due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer over-read. An attacker could exploit this vulnerability by submitting a crafted file containing OLE2 content to be scanned by ClamAV on an affected device.
Successful exploitation of this vulnerability could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.
Apply appropriate updates as mentioned in: