CVE - CVE-2010-1639

CVE-ID
CVE-2010-1639	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The cli_pdf function in libclamav/pdf.c in ClamAV before 0.96.1 allows remote attackers to cause a denial of service (crash) via a malformed PDF file, related to an inconsistency in the calculated stream length and the real stream length.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1024017 URL:http://www.securitytracker.com/id?1024017 MISC:39895 URL:http://secunia.com/advisories/39895 MISC:40317 URL:http://www.securityfocus.com/bid/40317 MISC:43752 URL:http://secunia.com/advisories/43752 MISC:ADV-2010-1214 URL:~~http://www.vupen.com/english/advisories/2010/1214~~ (Obsolete source) MISC:FEDORA-2011-2741 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055771.html MISC:FEDORA-2011-2743 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055777.html MISC:MDVSA-2010:110 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2010:110~~ (Obsolete source) MISC:SUSE-SR:2010:014 URL:http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html MISC:clamav-clipdf-dos(58824) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/58824 MISC:http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=commitdiff%3Bh=f0eb394501ec21b9fe67f36cbf5db788711d4236#patch2 URL:http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=commitdiff%3Bh=f0eb394501ec21b9fe67f36cbf5db788711d4236#patch2 MISC:https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2016 URL:https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2016
Assigning CNA
Red Hat, Inc.
Date Record Created
20100429	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20100429)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)