cisco-sa-clamav-css-Fn4QSZ
ClamAV Cascading Style Sheets Image Parsing Error Handling Denial of Service Vulnerability
Medium · Updated · Cisco
2 products with CSAF evidence
A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit this vulnerability by submitting a crafted HTML file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to terminate the scanning process. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.