CVE-2017-12377

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or potentially execute arbitrary code on an affected device. The vulnerability is due to improper input validation checking mechanisms in mew packet files sent to an affected device. A successful exploit could cause a heap-based buffer over-read condition in mew.c when ClamAV scans the malicious file, allowing the attacker to cause a DoS condition or potentially execute arbitrary code on the affected device.

• CWE-125

• http://blog.clamav.net/2018/01/clamav-0993-has-been-released.htmlRelease Notes, Vendor Advisory
• https://bugzilla.clamav.net/show_bug.cgi?id=11943Exploit, Issue Tracking, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/01/msg00035.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/3550-1/
• https://usn.ubuntu.com/3550-2/
• http://blog.clamav.net/2018/01/clamav-0993-has-been-released.htmlRelease Notes, Vendor Advisory
• https://bugzilla.clamav.net/show_bug.cgi?id=11943Exploit, Issue Tracking, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/01/msg00035.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/3550-1/
• https://usn.ubuntu.com/3550-2/

Published

Jan 26, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12371A "Cisco WebEx Network Recording Player Remote Code Executio…
• CVE-2017-12372A "Cisco WebEx Network Recording Player Remote Code Executio…
• CVE-2017-12373A vulnerability in the TLS protocol implementation of legacy…
• CVE-2017-12374The ClamAV AntiVirus software versions 0.99.2 and prior cont…
• CVE-2017-12375The ClamAV AntiVirus software versions 0.99.2 and prior cont…
• CVE-2017-12376ClamAV AntiVirus software versions 0.99.2 and prior contain …
• CVE-2017-12378ClamAV AntiVirus software versions 0.99.2 and prior contain …
• CVE-2017-12379ClamAV AntiVirus software versions 0.99.2 and prior contain …
• CVE-2017-1238IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vu…5.4
• CVE-2017-12380ClamAV AntiVirus software versions 0.99.2 and prior contain …
• CVE-2017-1239IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 could …4.3
• CVE-2017-1240IBM Rhapsody DM products could reveal sensitive information …