This vulnerability arises from ClamAV's InstallShield file format parser improperly managing temporary resources during scanning. An attacker can exploit this by submitting a malicious InstallShield file to Cisco Secure Endpoint, causing the ClamAV scanning process to terminate and temporarily exhausting system resources, resulting in a denial-of-service condition. The vulnerability affects numerous explicitly listed versions of Cisco Secure Endpoint. The CVSS 3.1 base score is 7.5, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability.

Successful exploitation leads to termination of the ClamAV scanning process and temporary consumption of system resources on the affected device, causing a denial-of-service condition. There is no impact on confidentiality or integrity reported. The affected software becomes unavailable or degraded during the DoS condition.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been provided by Cisco at this time. Users should monitor Cisco advisories for updates and consider limiting exposure to untrusted InstallShield files until a fix is available.