PT-2018-5392 · Cisco+3 · Clamav Antivirus+3
Published
2018-01-26
·
Updated
2026-02-06
·
CVE-2017-12375
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
ClamAV AntiVirus versions 0.99.2 and prior
Description:
The issue is due to a lack of input validation checking mechanisms during certain mail parsing functions, specifically the
rfc2047 function in mbox.c. An unauthenticated, remote attacker could exploit this by sending a crafted email, potentially causing a buffer overflow condition when the email is scanned, and leading to a denial of service (DoS) condition on the affected device.Recommendations:
For ClamAV AntiVirus versions 0.99.2 and prior, update to a version later than 0.99.2 to resolve the issue. As a temporary workaround, consider restricting the processing of emails that could trigger the
rfc2047 function in mbox.c until a patch is available.Exploit
Fix
DoS
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Clamav Antivirus
Suse
Ubuntu