Vulnerability in Clam Anti-Virus Clamav
CVE-2005-1922
The MS-Expand file handling in Clam AntiVirus (ClamAV) before 0.86 allows remote attackers to cause a denial of service (file descriptor and memory consumption) via a crafted file that causes repeated errors in the cli_msexpand function.
EPSS: 0.025 (83.2th percentile) — read the EPSS interpretation.
Affected products
- Clam_anti-virus Clamav — versions 0.81, 0.82, 0.83
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_IDEFENSE, Patch, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)