Improper input validation in Clam Anti-Virus Clamav
CVE-2005-1795
The filecopy function in misc.c in Clam AntiVirus (ClamAV) before 0.85, on Mac OS, allows remote attackers to execute arbitrary code via a virus in a filename that contains shell metacharacters, which are not properly handled when HFS permissions prevent the file from being deleted and ditto is invoked.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.036 (88.4th percentile) — read the EPSS interpretation.
Affected products
- Clam_anti-virus Clamav
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (Patch, vdb-entry, x_refsource_SECTRACK, Vendor Advisory)