This vulnerability arises from an integer overflow or wraparound in the PESpin file format parser component of ClamAV integrated into Cisco Secure Endpoint. The flaw is caused by insufficient boundary checks on PESpin file content during scanning, which may lead to memory corruption. Exploitation requires an attacker to submit a maliciously crafted PESpin file to the scanning engine, potentially causing the scanning process to crash and thus denying service. No evidence of confidentiality or integrity impact is described, and no known exploits are reported in the wild. The vulnerability affects multiple specific versions of Cisco Secure Endpoint as listed.

Successful exploitation results in a denial-of-service condition by terminating the ClamAV scanning process on the affected device. There is no direct indication of confidentiality or integrity compromise. The impact is limited to availability disruption of the scanning service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround is documented in the provided data. Users should monitor Cisco advisories for updates and apply patches once available. Until then, mitigating exposure to untrusted PESpin files may reduce risk.