[clamav-users] Possible problem with daily.cld 25460 / CVE-2019-0903

[Al Varnell]

Appears to be a malformed hex string in 3rd logical expression:

 * SUBSIG ID 2
 +-> OFFSET: ANY
 +-> SIGMOD: NONE
 +-> DECODED SUBSIGNATURE:
LibClamAV Error: cli_hex2ui(): Malformed hexstring: 1 (length: 1)
ERROR: Decoding failed (1): <<4#ib4#>0xB1B0AFBA)
ERROR: Decoding failed

-Al-

> On May 25, 2019, at 13:54, Hans Morten Kind via clamav-users <clamav-users at lists.clamav.net> wrote:
> 
> Seems like evry pdf-file is marked as infected by
>  Win.Exploit.CVE_2019_0903-6966169-0
> 
> I have put it into local.ign2 and restarted my clamd 
> hmk
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20190525/e461a070/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3907 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20190525/e461a070/attachment.bin>