CVE-2020-3341

Name of the Vulnerable Software and Affected Versions Clam AntiVirus (ClamAV) Software versions 0.101 through 0.102.2

Description A vulnerability in the PDF archive parsing module could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The issue is due to a stack buffer overflow read. An attacker could exploit this by sending a crafted PDF file to an affected device, potentially causing the ClamAV scanning process to crash.

Recommendations For Clam AntiVirus (ClamAV) Software versions 0.101 through 0.102.2, update to a version that fixes the stack buffer overflow read issue in the PDF archive parsing module to prevent denial of service conditions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.