Cisco Patches Long-Standing Vulnerabilities in ClamAV Antivirus Engine

Cisco's Talos group released security patches for ClamAV, an open-source antivirus engine, addressing seven vulnerabilities in versions 1.5.3 and 1.4.5. These flaws, some dating back nearly two decades, primarily affect the code responsible for unpacking and parsing executable formats. Organizations using ClamAV in mail gateways, file upload checks, and endpoint security tools are impacted. The vulnerabilities highlight risks associated with legacy parsing logic. The patches include fixes for critical issues that could potentially be exploited if left unaddressed. Security professionals are advised to update their systems promptly to mitigate risks. The vulnerabilities were confirmed by Cisco's Talos team and are now patched.

Key Points: • Cisco patched seven vulnerabilities in ClamAV, versions 1.5.3 and 1.4.5. • Some vulnerabilities have existed for nearly two decades, posing long-term risks. • Organizations using ClamAV in various security tools are advised to apply the updates immediately.