Secure Endpoint vulnerabilities
17 known vulnerabilities in Secure Endpoint from Cisco. 17 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Cisco Secure Endpoint: Buffer Copy without Checking Size of Input
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improp
- 7.5 High severity
Cisco Secure Endpoint: Buffer Copy without Checking Size of Input
A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper
- 7.5 High severity
Cisco Secure Endpoint: Buffer Copy without Checking Size of Input
A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper
- 7.5 High severity
Cisco Secure Endpoint: Buffer Copy without Checking Size of Input
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improp
- 7.5 High severity
Cisco Secure Endpoint: Allocation of Resources Without Limits or Throttling
A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper handling of temporary resources during file scanning. An att
- 7.5 High severity
Cisco Secure Endpoint: Buffer Copy without Checking Size of Input
A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper b
- 7.5 High severity
Cisco Secure Endpoint: Buffer Copy without Checking Size of Input
A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper
- 7.5 High severity
Cisco Secure Endpoint: Buffer Copy without Checking Size of Input
A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper b
- 7.5 High severity
Cisco Secure Endpoint: Out-of-bounds Read
A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a memory overread during UDF file scanning. An
- 7.5 High severity
Cisco Secure Endpoint: Heap-based Buffer Overflow
A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an integer underflow in a
- 7.5 High severity
Cisco Secure Endpoint: Out-of-bounds Read
A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scannin
- 7.5 High severity
Cisco Secure Endpoint: Expired Pointer Dereference
A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to a logic error in the memory management of an affected device. An att
- 7.5 High severity
Cisco Secure Endpoint: Loop with Unreachable Exit Condition
A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect chec
- 9.8 Critical severity
Cisco Secure Web Appliance: Out-of-bounds Write
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remo
- 7.5 High severity
Cisco AMP for Endpoints: Missing Release of Memory after Effective Lifetime
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in HTML file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.
- 7.5 High severity
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5…
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in the TIFF file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS versio
- 7.5 High severity
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5…
On April 20, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in CHM file parser of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 and LTS version 0.1