Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

CVE-2013-2021 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2013-2021

CVE-2013-2021

UNKNOWN

pdf

Published May 13, 2013

Modified 1 years ago

Details

pdf.c in ClamAV 0.97.1 through 0.97.7 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted length value in an encrypted PDF file.

References

WEB

http://blog.clamav.net/2013/04/clamav-0978-has-been-released.html

ADVISORY

http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html

ADVISORY

http://lists.apple.com/archives/security-announce/2013/Sep/msg00004.html

ADVISORY

http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109514.html

ADVISORY

http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109639.html

ADVISORY

http://lists.fedoraproject.org/pipermail/package-announce/2013-June/109652.html

ADVISORY

http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105575.html

ADVISORY

http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00006.html

ADVISORY

http://lists.opensuse.org/opensuse-updates/2013-06/msg00018.html

ADVISORY

http://lists.opensuse.org/opensuse-updates/2013-06/msg00020.html

ADVISORY

http://secunia.com/advisories/53150

ADVISORY

http://secunia.com/advisories/53182

WEB

http://support.apple.com/kb/HT5880

WEB

http://support.apple.com/kb/HT5892

ADVISORY

http://www.mandriva.com/security/advisories?name=MDVSA-2013:159

WEB

http://www.openwall.com/lists/oss-security/2013/04/25/2

WEB

http://www.openwall.com/lists/oss-security/2013/04/29/20

WEB

http://www.securityfocus.com/bid/59434

ADVISORY

http://www.ubuntu.com/usn/USN-1816-1

WEB

https://bugzilla.clamav.net/show_bug.cgi?id=7053

WEB

https://github.com/vrtadmin/clamav-devel/commit/24ff855c82d3f5c62bc5788a5776cefbffce2971

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2013-2021

CVSS Analysis

CVSS v2.0

4.3

Exploitability

Access Vector

NetworkAV:N

Access Complexity

MediumAC:M

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

PartialA:P

4.3/AV:N/AC:M/Au:N/C:N/I:N/A:P

Ecosystems

Timeline

PublishedMay 13, 2013

ModifiedAug 6, 2024