All vulnerabilities

Servers and applications

CVE-2019-1788

A vulnerability in the Object Linking & Embedding (OLE2) file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to a lack of proper input and validation checking mechanisms for OLE2 files sent an affected device. An attacker…

Severity
Medium 5.5
Published
8 Apr 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
1.8% in the next 30 daysHigher than 79% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
ClamAVServers and applications · cpe:a:clamav:clamav
  • Every version up to 0.101.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-1788
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-1788