Login Request a demo
Unscored severity · published Aug 3, 2005
CVE-2005-2450
Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain…
–
CVSS
3.9%
EPSS
No
On KEV
Description
Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.9% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Clamav · Clam Anti-virus
0.85; 0.85.1; 0.86 · source: NVD
Affected product
CL
Clamav
Clam Anti-virus
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2450
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2450
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000987
marc.info
http://marc.info/?l=bugtraq&m=112230864412932&w=2
secunia.com
http://secunia.com/advisories/16180
secunia.com
http://secunia.com/advisories/16229
secunia.com
http://secunia.com/advisories/16250
secunia.com
http://secunia.com/advisories/16296
More from Clamav
–
CVE-2008-5314
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted JPEG file, related…
–
CVE-2008-5050
Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash)…
–
CVE-2008-1389
libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file, related to an…
–
CVE-2008-3215
libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access
–
CVE-2008-2713
libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read