CVE-2013-2021

MEDIUM 4.3CVE-2013-2021 · Published 13/05/2013 · updated 16/06/2026

In short

CVE-2013-2021 is a MEDIUM (CVSS 4.3) vulnerability affecting clamav (clamav).
Chance of exploitation in the next 30 days (EPSS): 3.5%, higher than 89.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
clamav clamav	`= 0.97.1= 0.97.2= 0.97.3= 0.97.4= 0.97.5= 0.97.6= 0.97.7`	No fix yet

Description

pdf.c in ClamAV 0.97.1 through 0.97.7 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted length value in an encrypted PDF file.

References

blog.clamav.net/2013/04/clamav-0978-has-been-released.html
lists.apple.com/archives/security-announce/2013/Sep/msg00002.html
lists.apple.com/archives/security-announce/2013/Sep/msg00004.html
lists.fedoraproject.org/pipermail/package-announce/2013-June/109514.html
lists.fedoraproject.org/pipermail/package-announce/2013-June/109639.html
lists.fedoraproject.org/pipermail/package-announce/2013-June/109652.html
lists.fedoraproject.org/pipermail/package-announce/2013-May/105575.html
lists.opensuse.org/opensuse-security-announce/2014-12/msg00006.html
lists.opensuse.org/opensuse-updates/2013-06/msg00018.html
lists.opensuse.org/opensuse-updates/2013-06/msg00020.html
secunia.com/advisories/53150 · Vendor Advisory

More vulnerabilities in clamav

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free