CVE-2010-4479: Unspecified vulnerability in pdf.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a...

Security readout for executives and security teams

CVE-2010-4479 is a ClamAV PDF-parsing flaw fixed in ClamAV 0.96.5. A malicious PDF could crash the scanner and may allow arbitrary code execution. The public record is sparse, so treat code execution as possible rather than proven. Exposure is most likely where ClamAV or downstream vendor packages scan untrusted PDFs, including mail gateways, upload scanners, file shares, and endpoint scanning workflows still using versions before 0.96.5. Prioritize remediation for any internet-facing or mail-facing scanning service. The issue is old, but vulnerable systems would be processing attacker-supplied files by design, and the potential impact includes scanner outage or possible code execution. Mitigation focus: Upgrade ClamAV to 0.96.5 or a later vendor-supported package.; Apply relevant distribution advisories from Ubuntu, Fedora, Apple, or other package maintainers.; Prioritize systems that automatically scan email attachments or file uploads..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.