Cisco Secure Endpoint vulnerabilities
20 known vulnerabilities in Cisco Secure Endpoint from Cisco. 20 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Cisco Secure Endpoint: Buffer Copy without Checking Size of Input
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improp
- 7.5 High severity
Cisco Secure Endpoint: Out-of-bounds Read
A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to imp
- 7.5 High severity
Cisco Secure Endpoint: Out-of-bounds Read
A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improp
- 7.5 High severity
Cisco Secure Endpoint: Stack-based Buffer Overflow
A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improp
- 7.5 High severity
Cisco Secure Endpoint: Integer Overflow or Wraparound
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to imp
- 7.5 High severity
Cisco Secure Endpoint: Double Free
A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper memory handling when processing content in zip files during scanning. An a
- 7.5 High severity
Cisco Secure Endpoint: Buffer Copy without Checking Size of Input
A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper boundary checks for content in zip files during scanning, which may result
- 7.5 High severity
Cisco Secure Endpoint: Buffer Copy without Checking Size of Input
A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper
- 7.5 High severity
Cisco Secure Endpoint: Buffer Copy without Checking Size of Input
A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper
- 7.5 High severity
Cisco Secure Endpoint: Buffer Copy without Checking Size of Input
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improp
- 7.5 High severity
Cisco Secure Endpoint: Allocation of Resources Without Limits or Throttling
A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper handling of temporary resources during file scanning. An att
- 7.5 High severity
Cisco Secure Endpoint: Buffer Copy without Checking Size of Input
A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper b
- 7.5 High severity
Cisco Secure Endpoint: Buffer Copy without Checking Size of Input
A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper
- 7.5 High severity
Cisco Secure Endpoint: Buffer Copy without Checking Size of Input
A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper b
- 7.5 High severity
Cisco Secure Endpoint: Out-of-bounds Read
A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a memory overread during UDF file scanning. An
- 7.5 High severity
Cisco Secure Endpoint: Heap-based Buffer Overflow
A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an integer underflow in a
- 7.5 High severity
Cisco Secure Endpoint: Out-of-bounds Read
A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scannin
- 7.5 High severity
Cisco Secure Endpoint: Expired Pointer Dereference
A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a logic error in the memory management of an affected device. An att
- 7.5 High severity
Cisco Secure Endpoint: Loop with Unreachable Exit Condition
A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect chec
- 9.8 Critical severity
Cisco Secure Web Appliance: Out-of-bounds Write
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remo