CVE-2013-2021

EPSS 3.5%
Veröffentlicht 13.05.2013 23:55:02
Zuletzt bearbeitet 29.04.2026 01:13:23
Erkennungen
Login

pdf.c in ClamAV 0.97.1 through 0.97.7 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted length value in an encrypted PDF file.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 24

NVD 14 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Canonical ≫ Ubuntu Linux Version 10.04 Update - Edition lts

Canonical ≫ Ubuntu Linux Version 11.10

Canonical ≫ Ubuntu Linux Version 12.04 Update - Edition lts

Canonical ≫ Ubuntu Linux Version 12.10

Canonical ≫ Ubuntu Linux Version 13.04

Suse ≫ Linux Enterprise Server Version 11.0 Update sp1

Suse ≫ Linux Enterprise Server Version 11.0 Update sp2

Clamav ≫ Clamav Version 0.97.1

Clamav ≫ Clamav Version 0.97.2

Clamav ≫ Clamav Version 0.97.3

Clamav ≫ Clamav Version 0.97.4

Clamav ≫ Clamav Version 0.97.5

Clamav ≫ Clamav Version 0.97.6

Clamav ≫ Clamav Version 0.97.7

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.5%	0.877

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html

http://support.apple.com/kb/HT5880

http://lists.apple.com/archives/security-announce/2013/Sep/msg00004.html

http://support.apple.com/kb/HT5892

http://blog.clamav.net/2013/04/clamav-0978-has-been-released.html

http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109514.html

http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109639.html

http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109652.html

http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105575.html

http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00006.html

http://lists.opensuse.org/opensuse-updates/2013-06/msg00018.html

http://lists.opensuse.org/opensuse-updates/2013-06/msg00020.html

http://secunia.com/advisories/53150

Vendor Advisory

http://secunia.com/advisories/53182

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2013:159

http://www.openwall.com/lists/oss-security/2013/04/25/2

http://www.openwall.com/lists/oss-security/2013/04/29/20

http://www.securityfocus.com/bid/59434

http://www.ubuntu.com/usn/USN-1816-1

https://bugzilla.clamav.net/show_bug.cgi?id=7053

https://github.com/vrtadmin/clamav-devel/commit/24ff855c82d3f5c62bc5788a5776cefbffce2971

https://nvd.nist.gov/vuln/detail/CVE-2013-2021

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-2021

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-2021

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2013-2021