CVE-2010-4260: Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV before 0.96.5 allow remote attackers t...

Security readout for executives and security teams

CVE-2010-4260 is a ClamAV PDF scanning flaw fixed in ClamAV 0.96.5. A malicious PDF could crash the antivirus engine and might allow arbitrary code execution. Business risk is highest where old ClamAV/libclamav versions still scan email attachments, file uploads, or shared documents. Likely exposure is limited to systems still running ClamAV/libclamav before 0.96.5 or unpatched vendor builds, especially mail gateways, upload scanners, content filters, and file repositories that automatically scan PDFs. Treat as a targeted legacy remediation item. It is old and not KEV-listed, but remaining vulnerable scanners may process untrusted files automatically, creating outage risk and possible code-execution exposure in security infrastructure. Mitigation focus: Upgrade ClamAV/libclamav to 0.96.5 or a vendor-patched package.; Apply relevant distribution advisories from Ubuntu, Fedora, Red Hat, Apple, or your platform vendor.; Prioritize scanners handling inbound email, file uploads, and shared document repositories..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.