Threats tagged 'ghsa-6j5q-p9xp-3cc6'

A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV allows an unauthenticated remote attacker to cause a denial of service (DoS) by triggering a heap buffer overflow read due to an integer underflow in a bounds check. Exploitation requires submitting a crafted OLE2 file to ClamAV for scanning, which can terminate the scanning process and disrupt service. Cisco has released updates to address this issue, and no workarounds are available.