CVEvulnerability

CVE-2005-1923

2.6 LOW Published 2005-07-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-07-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.6 LOW — AV:N/AC:H/Au:N/C:N/I:N/A:P

Description

The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a cabinet (CAB) file with the cffile_FolderOffset field set to 0xff, which causes a zero-length read.

Affected configurations

• clam anti-virus clamav 0.83 • clam anti-virus clamav 0.84 rc1 • clam anti-virus clamav 0.84 rc2 • clam anti-virus clamav 0.85 • clam anti-virus clamav 0.85.1

References