CVE-2019-1789

Name of the Vulnerable Software and Affected Versions ClamAV versions prior to 0.101.2

Description The issue is related to a denial of service (DoS) condition that may occur when scanning certain files, such as Windows EXE and DLL files packed with Aspack, due to inadequate bound-checking. This can lead to an out-of-bounds heap read condition.

Recommendations For ClamAV versions prior to 0.101.2, update to version 0.101.2 or later to resolve the issue. As a temporary workaround, consider restricting the scanning of potentially malicious or packed files until the update is applied.