ClamAV PDF Scanning Buffer Overflow Vulnerability

A vulnerability in the PDF scanning processes of ClamAV could allow anunauthenticated, remote attacker to cause a buffer overflow condition,cause a denial of service (DoS) condition, or execute arbitrary code on anaffected device.This vulnerability exists because memory buffers are allocated incorrectlywhen PDF files are processed. An attacker could exploit this vulnerabilityby submitting a crafted PDF file to be scanned by ClamAV on an affecteddevice. A successful exploit could allow the attacker to trigger a bufferoverflow, likely resulting in the termination of the ClamAV scanningprocess and a DoS condition on the affected software. Although unproven,there is also a possibility that an attacker could leverage the bufferoverflow to execute arbitrary code with the privileges of the ClamAVprocess.

Where it's fixed