This vulnerability arises from a classic buffer overflow in the 7z file parser component of ClamAV integrated into Cisco Secure Endpoint. The flaw is due to improper boundary checks on 7z file content during scanning, which can cause out-of-bounds writes. An attacker can remotely trigger this by submitting maliciously crafted 7z files for scanning, causing the ClamAV process to terminate unexpectedly and leading to a denial-of-service condition. The vulnerability does not require authentication and has no reported known exploits in the wild. Affected versions are explicitly enumerated, but no official fix or patch information is provided in the available data.

Successful exploitation results in denial of service by crashing the ClamAV scanning process on affected Cisco Secure Endpoint versions. There is no reported impact on confidentiality or integrity. The vulnerability could disrupt endpoint protection services, potentially reducing security monitoring effectiveness during the DoS condition.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting or scanning untrusted 7z files in a controlled environment to reduce exposure. Monitor vendor communications for updates on patches or mitigations.