Medium severity · published Apr 8, 2019
CVE-2019-1787
A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote…
5.5
CVSS
1.7%
EPSS
No
On KEV
Description
A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of proper data handling mechanisms within the device buffer while indexing remaining file data on an affected device. An attacker could exploit this vulnerability by sending crafted PDF files to an affected device. A successful exploit could allow the attacker to cause a heap buffer out-of-bounds read condition, resulting in a crash that could result in a denial of service condition on an affected device.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Clamav · Clamav
through 0.101.1 · source: NVD
DL
Debian Linux · Debian
8.0 · source: NVD
LE
Leap · Opensuse
15.0; 42.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-1787
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-1787
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00062.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00064.html
Exploit
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12181
Mailing List
https://lists.debian.org/debian-lts-announce/2019/04/msg00019.html
Third Party Advisory
https://security.gentoo.org/glsa/201904-12
More from Clamav
9.8
CVE-2025-20260
A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of service (DoS)…
9.8
CVE-2023-20032
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and…
9.8
CVE-2013-7088
ClamAV before 0.97.7 has buffer overflow in the libclamav component
9.8
CVE-2013-7087
ClamAV before 0.97.7 has WWPack corrupt heap memory
9.8
CVE-2007-6745
clamav 0.91.2 suffers from a floating point exception when using ScanOLE2