CVE-2011-1003 — Double Free in Clamav

CWE-3999 documents7 sources
Severity
6.8MEDIUMNVD
EPSS
9.4%
top 7.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
ClamavDebian Clamav
Timeline
PublishedFeb 23
Latest updateMay 17

Description

Double free vulnerability in the vba_read_project_strings function in vba_extract.c in libclamav in ClamAV before 0.97 might allow remote attackers to execute arbitrary code via crafted Visual Basic for Applications (VBA) data in a Microsoft Office document. NOTE: some of these details are obtained from third party information.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages3 packages

▶debiandebian/clamav< clamav 0.97+dfsg-1 (bookworm)
▶Debianclamav/clamav< 0.97+dfsg-1+3
▶NVDclamav/clamav0.96.5+90

🔴Vulnerability Details

2
GHSA
GHSA-vmrc-q6qc-cw92: Double free vulnerability in the vba_read_project_strings function in vba_extract↗2022-05-17
▶
OSV
CVE-2011-1003: Double free vulnerability in the vba_read_project_strings function in vba_extract↗2011-02-23
▶

💥Exploits & PoCs

1
Exploit-DB
NSHC Papyrus 2.0 - Heap Overflow↗2011-08-13
▶

📋Vendor Advisories

2
Ubuntu
ClamAV vulnerability↗2011-02-28
▶
Debian
CVE-2011-1003: clamav - Double free vulnerability in the vba_read_project_strings function in vba_extrac...↗2011
▶

💬Community

3
Bugzilla
CVE-2011-1003 clamav: Double free error by reading VBA project strings [fedora-all]↗2011-02-23
▶
Bugzilla
CVE-2011-1003 clamav: Double free error by reading VBA project strings↗2011-02-23
▶
Bugzilla
CVE-2011-1003 clamav: Double free error by reading VBA project strings [epel-4]↗2011-02-23
▶