FILE-OTHER ClamAV OLE2 uniq_add out of bounds write attempt

Description

Detects a document exploiting CVE-2019-1788, an out-of-bounds write in the ClamAV antivirus engine's OLE2 handling. A crafted document corrupts the scanner itself, blinding the detection layer rather than the victim application.

CVEs

References

• nvd.nist.gov →