ClamAV (detection version 20170623) detects
BC.Pdf.Exploit.CVE_2017_3033 in quite some PDF files. I wonder if this is not a false-positive because no other engines detect such "infection". The CVE regards:
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when handling JPEG 2000 code-stream tile data.
- CVSS v2 Base Score: 4.3 MEDIUM
- CVSS v3 Base Score: 3.3 LOW
Does this mean that the PDF file is just causing Adobe Acrobat Reader to crash due to memory address leak? Or does this mean that the PDF is "infected" and can it cause more harm? Or is it just that the JPEG 2000 code-stream in that PDF file can possibly cause Adobe Reader to crash?
Lastly, apart from obviously updating Adobe Reader, what can I do in order to "fix" and "clean" this PDF files?