Security News > 2023 > February > Critical RCE Vulnerability Discovered in ClamAV Open-Source Antivirus Software
Cisco has rolled out security updates to address a critical flaw reported in the ClamAV open source antivirus engine that could lead to remote code execution on susceptible devices.
"This vulnerability is due to a missing buffer size check that may result in a heap buffer overflow write," Cisco Talos said in an advisory.
"An attacker could exploit this vulnerability by submitting a crafted HFS+ partition file to be scanned by ClamAV on an affected device."
"This vulnerability is due to enabling XML entity substitution that may result in XML external entity injection," Cisco noted.
"An attacker could exploit this vulnerability by submitting a crafted DMG file to be scanned by ClamAV on an affected device."
Cisco separately also resolved a denial-of-service vulnerability impacting Cisco Nexus Dashboard and two other privilege escalation and command injection flaws in Email Security Appliance and Secure Email and Web Manager.
News URL
https://thehackernews.com/2023/02/critical-rce-vulnerability-discovered.html
Related news
- Critical RCE Flaw in GFI KerioControl Allows Remote Code Execution via CRLF Injection (source)
- Hackers exploit critical Aviatrix Controller RCE flaw in attacks (source)
- Critical SimpleHelp Flaws Allow File Theft, Privilege Escalation, and RCE Attacks (source)
- Critical Flaws in WGS-804HPT Switches Enable RCE and Network Exploitation (source)
- Web Cache Vulnerability Scanner: Open-source tool for detecting web cache poisoning (source)
- Cisco fixes ClamAV vulnerability with available PoC and critical Meeting Management flaw (source)
- Zyxel CPE devices under attack via critical vulnerability without a patch (CVE-2024-40891) (source)
- Lightning AI Studio Vulnerability Could've Allowed RCE via Hidden URL Parameter (source)
- Microsoft Patches Critical Azure AI Face Service Vulnerability with CVSS 9.9 Score (source)
- Critical RCE bug in Microsoft Outlook now exploited in attacks (source)