CVE-2021-1252

Name of the Vulnerable Software and Affected Versions Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1

Description A vulnerability in the Excel XLM macro parsing module could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The issue is due to improper error handling that may result in an infinite loop. An attacker could exploit this by sending a crafted Excel file to an affected device, potentially causing the ClamAV scanning process to hang.

Recommendations For versions 0.103.0 and 0.103.1, consider disabling the Excel XLM macro parsing module until a patch is available to prevent exploitation. As a temporary workaround, restrict the handling of crafted Excel files to minimize the risk of denial of service conditions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.