CVE-2005-1923

Published: Jul 5, 2005Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:N/A:P

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a cabinet (CAB) file with the cffile_FolderOffset field set to 0xff, which causes a zero-length read.

Affected (5)

Products: Clam Anti Virus: Clamav

Clam Anti Virus

1 product

Clamav

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Clam Anti Virus Clamav	Version 0.83
Clam Anti Virus Clamav	Version 0.84_rc1
Clam Anti Virus Clamav	Version 0.84_rc2
Clam Anti Virus Clamav	Version 0.85.1
Clam Anti Virus Clamav	Version 0.85

References (4)

http://www.debian.org/security/2005/dsa-737

Source: cve@mitre.org

http://www.idefense.com/application/poi/display?id=275&type=vulnerabilities

Source: cve@mitre.org

PatchVendor Advisory

http://www.debian.org/security/2005/dsa-737

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.idefense.com/application/poi/display?id=275&type=vulnerabilities

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.