CVE-2010-3434
published 2010-09-30CVE-2010-3434: Buffer overflow in the find_stream_bounds function in pdf.c in libclamav in ClamAV before 0.96.3 allows remote attackers to cause a denial of service…
PriorityP340critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
6.53%
93.0th percentile
Buffer overflow in the find_stream_bounds function in pdf.c in libclamav in ClamAV before 0.96.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document. NOTE: some of these details are obtained from third party information.
Affected
87 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| clamav | clamav | <= 0.96.2 | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
| clamav | clamav | — | — |
CVSS provenance
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
osv9.3CRITICAL
vendor_debian9.3CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-qqjf-9hh5-4gfh: Buffer overflow in the find_stream_bounds function in pdf
ghsa_unreviewed·2022-05-17
CVE-2010-3434 [HIGH] CWE-119 GHSA-qqjf-9hh5-4gfh: Buffer overflow in the find_stream_bounds function in pdf
Buffer overflow in the find_stream_bounds function in pdf.c in libclamav in ClamAV before 0.96.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document. NOTE: some of these details are obtained from third party information.
OSV
CVE-2010-3434: Buffer overflow in the find_stream_bounds function in pdf
osv·2010-09-30·CVSS 9.3
CVE-2010-3434 [CRITICAL] CVE-2010-3434: Buffer overflow in the find_stream_bounds function in pdf
Buffer overflow in the find_stream_bounds function in pdf.c in libclamav in ClamAV before 0.96.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document. NOTE: some of these details are obtained from third party information.
Debian
CVE-2010-3434: clamav - Buffer overflow in the find_stream_bounds function in pdf.c in libclamav in Clam...
vendor_debian·2010·CVSS 9.3
CVE-2010-3434 [CRITICAL] CVE-2010-3434: clamav - Buffer overflow in the find_stream_bounds function in pdf.c in libclamav in Clam...
Buffer overflow in the find_stream_bounds function in pdf.c in libclamav in ClamAV before 0.96.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document. NOTE: some of these details are obtained from third party information.
Scope: local
bookworm: resolved (fixed in 0.96.3+dfsg-1)
bullseye: resolved (fixed in 0.96.3+dfsg-1)
forky: resolved (fixed in 0.96.3+dfsg-1)
sid: resolved (fixed in 0.96.3+dfsg-1)
trixie: resolved (fixed in 0.96.3+dfsg-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=clamav-0.96.3http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=commit%3Bh=dc5143b4669ae39c79c9af50d569c28c798f33dahttp://lists.apple.com/archives/security-announce/2011/Mar/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.htmlhttp://security-tracker.debian.org/tracker/CVE-2010-3434http://support.apple.com/kb/HT4581http://www.openwall.com/lists/oss-security/2010/09/22/1http://www.openwall.com/lists/oss-security/2010/09/27/6http://www.openwall.com/lists/oss-security/2010/09/28/3http://www.openwall.com/lists/oss-security/2010/09/28/5http://www.vupen.com/english/advisories/2010/2455https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2226http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=blob_plain%3Bf=ChangeLog%3Bhb=clamav-0.96.3http://git.clamav.net/gitweb?p=clamav-devel.git%3Ba=commit%3Bh=dc5143b4669ae39c79c9af50d569c28c798f33dahttp://lists.apple.com/archives/security-announce/2011/Mar/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.htmlhttp://security-tracker.debian.org/tracker/CVE-2010-3434http://support.apple.com/kb/HT4581http://www.openwall.com/lists/oss-security/2010/09/22/1http://www.openwall.com/lists/oss-security/2010/09/27/6http://www.openwall.com/lists/oss-security/2010/09/28/3http://www.openwall.com/lists/oss-security/2010/09/28/5http://www.vupen.com/english/advisories/2010/2455https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2226
2010-09-30
Published