CVE-2005-3303

Published: Nov 5, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 through 0.87 allows remote attackers to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file.

Affected (11)

Products: Clam Anti Virus: Clamav

Clam Anti Virus

1 product

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Clam Anti Virus Clamav	Version 0.80
Clam Anti Virus Clamav	Version 0.81
Clam Anti Virus Clamav	Version 0.82
Clam Anti Virus Clamav	Version 0.83
Clam Anti Virus Clamav	Version 0.84
Clam Anti Virus Clamav	Version 0.85.1
Clam Anti Virus Clamav	Version 0.85
Clam Anti Virus Clamav	Version 0.86.1
Clam Anti Virus Clamav	Version 0.86.2
Clam Anti Virus Clamav	Version 0.86
Clam Anti Virus Clamav	Version 0.87

References (34)

http://archives.neohapsis.com/archives/bugtraq/2005-11/0041.html

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/17184

Source: cve@mitre.org

http://secunia.com/advisories/17434

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/17448

Source: cve@mitre.org

http://secunia.com/advisories/17451

Source: cve@mitre.org

http://secunia.com/advisories/17501

Source: cve@mitre.org

http://secunia.com/advisories/17559

Source: cve@mitre.org

http://securityreason.com/securityalert/146

Source: cve@mitre.org

http://securitytracker.com/id?1015154

Source: cve@mitre.org

http://sourceforge.net/project/shownotes.php?release_id=368319

Source: cve@mitre.org

Patch

http://www.debian.org/security/2005/dsa-887

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2005:205

Source: cve@mitre.org

http://www.osvdb.org/20482

Source: cve@mitre.org

http://www.securityfocus.com/bid/15318

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2294

Source: cve@mitre.org

http://www.zerodayinitiative.com/advisories/ZDI-05-002.html

Source: cve@mitre.org

PatchVendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2005-11/0041.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/17184

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17434

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/17448

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17451

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17501

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17559

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/146

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015154

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/project/shownotes.php?release_id=368319

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.debian.org/security/2005/dsa-887

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2005:205

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/20482

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15318

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2005/2294

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.zerodayinitiative.com/advisories/ZDI-05-002.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.