Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer over-read. An attacker could exploit this vulnerability by submitting a crafted file containing OLE2 content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software and consuming available system resources. For a description of this vulnerability, see the ClamAV blog .
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
缓冲区上溢读取
Vulnerability Title
Cisco Secure Endpoint 缓冲区错误漏洞
Vulnerability Description
Cisco Secure Endpoint（Cisco AMP for Endpoints）是美国思科（Cisco）公司的一套集成了静态和动态恶意软件分析以及威胁情报于一体的终端应用程序。 Cisco Secure Endpoint Connector for Windows 7.5.17之前、8.2.3.301191之前版本，Secure Endpoint Private Cloud 3.8.0之前版本存在缓冲区错误漏洞，该漏洞源于扫描期间对字符串结尾值的错误检查，这可能会导致堆缓冲区过度读取在受影响的
CVSS Information
N/A
Vulnerability Type
N/A