Unscored severity · published Nov 16, 2005
CVE-2005-3587
Improper boundary checks in petite.c in Clam AntiVirus (ClamAV) before 0.87.1 allows attackers to perform unknown attacks via unknown vectors
–
CVSS
2.2%
EPSS
No
On KEV
Description
Improper boundary checks in petite.c in Clam AntiVirus (ClamAV) before 0.87.1 allows attackers to perform unknown attacks via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Clamav · Clam Anti-virus
0.15; 0.20; 0.21; 0.22; 0.23; 0.24; +27 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3587
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3587
Patch
http://sourceforge.net/project/shownotes.php?release_id=368319
www.gentoo.org
http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDKSA-2005:205
More from Clamav
–
CVE-2008-5314
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted JPEG file, related…
–
CVE-2008-5050
Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash)…
–
CVE-2008-1389
libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file, related to an…
–
CVE-2008-3215
libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite file that triggers an out-of-bounds memory access
–
CVE-2008-2713
libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read