CVEvulnerability

CVE-2005-3500

5.0 MEDIUM Published 2005-11-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-11-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via a crafted value in a CAB file that causes ClamAV to repeatedly scan the same block.

Affected configurations

• clam anti-virus clamav 0.15 • clam anti-virus clamav 0.20 • clam anti-virus clamav 0.21 • clam anti-virus clamav 0.22 • clam anti-virus clamav 0.23 • clam anti-virus clamav 0.24 • clam anti-virus clamav 0.51 • clam anti-virus clamav 0.52 • clam anti-virus clamav 0.53 • clam anti-virus clamav 0.54 • clam anti-virus clamav 0.60 • clam anti-virus clamav 0.65 • clam anti-virus clamav 0.67 • clam anti-virus clamav 0.68 • clam anti-virus clamav 0.68.1 • clam anti-virus clamav 0.70 • clam anti-virus clamav 0.71 • clam anti-virus clamav 0.72 • clam anti-virus clamav 0.73 • clam anti-virus clamav 0.74 • clam anti-virus clamav 0.75 • clam anti-virus clamav 0.75.1 • clam anti-virus clamav 0.80 • clam anti-virus clamav 0.81 • clam anti-virus clamav 0.82 • clam anti-virus clamav 0.83 • clam anti-virus clamav 0.84 • clam anti-virus clamav 0.85 • clam anti-virus clamav 0.85.1 • clam anti-virus clamav 0.86 • clam anti-virus clamav 0.86.1 • clam anti-virus clamav 0.86.2 • clam anti-virus clamav 0.87

References