CVE-2010-4260

Name	CVE-2010-4260
Description	Multiple unspecified vulnerabilities in pdf.c in libclamav in ClamAV before 0.96.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document, aka (1) "bb #2358" and (2) "bb #2396."
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
clamav (PTS)	stretch	0.102.3+dfsg-0~deb9u1	fixed
	stretch (security)	0.103.6+dfsg-0+deb9u1	fixed
	buster	0.103.5+dfsg-0+deb10u1	fixed
	bullseye	0.103.5+dfsg-0+deb11u1	fixed
	bookworm, sid	0.103.6+dfsg-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
clamav	source	lenny	(not affected)
clamav	source	(unstable)	0.96.5+dfsg-1

[lenny] - clamav <not-affected> (Introduced in 3643f3d2b0a38fdc7bc6777d093c857b9760804e)
Fixed in 019f1955194360600ecf0644959ceca6734c2d7b