CVE-2019-1788

Name
CVE-2019-1788
Description
A vulnerability in the Object Linking & Embedding (OLE2) file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a lack of proper input and validation checking mechanisms for OLE2 files sent an affected device. An attacker could exploit this vulnerability by sending malformed OLE2 files to the device running an affected version ClamAV Software. An exploit could allow the attacker to cause an out-of-bounds write condition, resulting in a crash that could result in a denial of service condition on an affected device.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Exploit https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12166
Third Party Advisory https://security.gentoo.org/glsa/201904-12
Mailing List http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00064.html
Mailing List https://lists.debian.org/debian-lts-announce/2019/04/msg00019.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00062.html

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:* clamav >= None <= 0.101.1

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
clamav edge-community 0.100.3-r0 None fixed
clamav edge-community 0.100.2-r0 None possibly vulnerable
clamav edge-community 0.100.1-r0 None possibly vulnerable
clamav edge-community 0.99.4-r0 None possibly vulnerable
clamav edge-community 0.99.3-r0 None possibly vulnerable
clamav 3.22-community 0.100.3-r0 None fixed
clamav 3.22-community 0.100.2-r0 None possibly vulnerable
clamav 3.22-community 0.100.1-r0 None possibly vulnerable
clamav 3.22-community 0.99.4-r0 None possibly vulnerable
clamav 3.22-community 0.99.3-r0 None possibly vulnerable
clamav 3.21-community 0.100.3-r0 None fixed
clamav 3.20-community 0.100.3-r0 None fixed
clamav 3.19-community 0.100.3-r0 None fixed
clamav 3.18-community 0.100.3-r0 None fixed
clamav 3.17-community 0.100.3-r0 None fixed
clamav 3.12-main 0.100.3-r0 None fixed
clamav 3.11-main 0.100.3-r0 None fixed
clamav 3.10-main 0.100.3-r0 None fixed