PT-2018-5392 · Cisco+3 · Clamav Antivirus+3
Publicado
2018-01-26
·
Atualizado
2026-02-06
·
CVE-2017-12375
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
ClamAV AntiVirus versions 0.99.2 and prior
Description:
The issue is due to a lack of input validation checking mechanisms during certain mail parsing functions, specifically the
rfc2047 function in mbox.c. An unauthenticated, remote attacker could exploit this by sending a crafted email, potentially causing a buffer overflow condition when the email is scanned, and leading to a denial of service (DoS) condition on the affected device.Recommendations:
For ClamAV AntiVirus versions 0.99.2 and prior, update to a version later than 0.99.2 to resolve the issue. As a temporary workaround, consider restricting the processing of emails that could trigger the
rfc2047 function in mbox.c until a patch is available.Exploit
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Clamav Antivirus
Suse
Ubuntu