This vulnerability in Cisco Secure Endpoint arises from a classic buffer overflow in the ClamAV zip archive parser due to insufficient boundary checks on zip file content during scanning. The flaw allows an unauthenticated remote attacker to submit a specially crafted zip file that triggers an out-of-bounds write, causing the ClamAV scanning process to crash. This results in a denial-of-service condition on the affected software. The vulnerability has a CVSS 3.1 base score of 7.5, reflecting high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impacts availability only. There is no vendor advisory or patch information provided, and no known exploits in the wild have been reported.

Successful exploitation causes termination of the ClamAV scanning process within Cisco Secure Endpoint, resulting in a denial-of-service condition. There is no indication of confidentiality or integrity impact. The vulnerability can be triggered remotely by an unauthenticated attacker via a crafted zip file.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider restricting or monitoring the submission of zip files for scanning to mitigate potential denial-of-service impact.