ClamAV Recursion Level Handling Denial of Service Vulnerability (Windows)

  1. Network Vulnerabilities
  2. Denial of Service
  3. ClamAV Recursion Level Handling Denial of Service Vulnerability (Windows)
Summary
The host is installed with ClamAV and is prone to denial of service vulnerability.
Impact
Successful exploitation will allow attackers to cause a denial of service (crash) via vectors related to recursion level. Impact Level: Application
Solution
Upgrade to ClamAV version 0.97.3 or later For updates refer to http://www.clamav.net/lang/en/download/
Insight
The flaw is due to the way the bytecode engine handled recursion level when scanning an unpacked file.
Affected
ClamAV before 0.97.3 on Windows.
References
Updated on 2017-03-28
Severity
Medium Severity
Classification
Related Vulnerabilities