Vulnerability in Clam Anti-Virus Clamav
CVE-2005-1923
The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a cabinet (CAB) file with the cffile_FolderOffset field set to 0xff, which causes a zero-length read.
EPSS: 0.016 (73.5th percentile) — read the EPSS interpretation.
Affected products
- Clam_anti-virus Clamav — versions 0.83, 0.84_rc1, 0.84_rc2
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_IDEFENSE, Patch, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)