CVE-2010-1639
Fixed in a distro release EPSS 3%
The cli_pdf function in libclamav/pdf.c in ClamAV before 0.96.1 allows remote attackers to cause a denial of service (crash) via a malformed PDF file, related to an inconsistency in the calculated stream length and the real stream length.
Products: clamav
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | clamav | 0.96.1+dfsg-1 |
| Debian 13 | clamav | 0.96.1+dfsg-1 |
| Debian 14 | clamav | 0.96.1+dfsg-1 |