[CIVN-2024-0033] Denial of Service Vulnerability in Cisco

Denial of Service Vulnerability in Cisco

Indian – Computer Emergency Response Team (cert-in.org.in)

Severity Rating: CRITICAL

Component Affected

Secure Endpoint Connector for Windows

Secure Endpoint Private Cloud

Overview

A Vulnerability has been reported in OLE2 file format parser of ClamAV which could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

Description

This Vulnerability exists in OLE2 file format parser of ClamAV due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer over-read. An attacker could exploit this vulnerability by submitting a crafted file containing OLE2 content to be scanned by ClamAV on an affected device.

Successful exploitation of this vulnerability could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software.