Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) via an OLE2 file with (1) a large property size or (2) a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ClamAV 资源管理错误漏洞
Vulnerability Description
ClamAV（Clam AntiVirus）是Clamav团队的一套免费且开源的杀毒软件。该软件用于检测木马、病毒、恶意软件和其他恶意威胁。 ClamAV 存在资源管理错误漏洞，ClamAV的OLE2解析器没有正确地处理带有畸形FAT分区或超大属性大小的对象，如果扫描到了畸形的OLE2文件的话，就可能触发死循环，导致耗尽大量存储和CPU资源。
CVSS Information
N/A
Vulnerability Type
N/A