PT-2005-3359 · Clamav · Libclamav+1

Alex Wheeler + 1 · Published 2005-08-03 · Updated 2017-07-11 · CVE-2005-2450

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Clam AntiVirus (ClamAV) versions 0.86.1 and earlier

Description The issue is related to multiple integer overflows in file format processors for TNEF, CHM, or FSG files in libclamav. This allows remote attackers to gain privileges via a crafted e-mail message.

Recommendations For Clam AntiVirus (ClamAV) versions 0.86.1 and earlier, update to a version later than 0.86.1 to resolve the issue.

Fix

Related Identifiers

CVE-2005-2450

DSA-776-1

DTSA-3-1

Affected Products

Clam Antivirus

Libclamav

References · 19

• http://novell.com/linux/security/advisories/2005_18_sr.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-2450 · Vendor Advisory
• http://sourceforge.net/project/shownotes.php?release_id=344514 · Patch
• http://security.gentoo.org/glsa/glsa-200507-25.xml · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000987 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2450 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-2450 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2450 · Security Note
• http://secunia.com/advisories/16296 · Note
• http://osvdb.org/18258 · Note
• http://secunia.com/advisories/16180 · Note
• http://osvdb.org/18257 · Note
• http://marc.info/?l=bugtraq&m=112230864412932&w=2 · Note
• http://secunia.com/advisories/16458 · Note
• http://osvdb.org/18259 · Note