Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ClamAV ARJ Archive Parsing Denial of Service Vulnerability
Vulnerability Description
A vulnerability in the ARJ archive parsing module in Clam AntiVirus (ClamAV) Software versions 0.102.2 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a heap buffer overflow read. An attacker could exploit this vulnerability by sending a crafted ARJ file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
输入验证不恰当
Vulnerability Title
Clam AntiVirus 输入验证错误漏洞
Vulnerability Description
Clam AntiVirus是ClamAV团队的一款用于检测木马，病毒，恶意软件和其他恶意威胁的开源杀毒引擎。 Clam AntiVirus 0.102.2版本中的ARJ存档解析模块存在输入验证错误漏洞。远程攻击者可借助特制ARJ文件利用该漏洞导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A