PT-2005-4114 · Clam Antivirus · Clamav

Published 2005-11-05 · Updated 2024-06-15 · CVE-2005-3303

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ClamAV versions 0.80 through 0.87

Description The issue allows remote attackers to cause memory corruption and execute arbitrary code via a crafted FSG 1.33 file. This is due to a problem in the FSG unpacker (fsg.c) in Clam AntiVirus.

Recommendations For ClamAV versions 0.80 through 0.87, update to a version that contains a fix for this issue to prevent memory corruption and arbitrary code execution.

Fix

Related Identifiers

CVE-2005-3303

DSA-887-1

DTSA-21-1

OPENSUSE-SU-2024:10685-1

Affected Products

Clamav

References · 77

• http://secunia.com/advisories/17434 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-3303 · Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2005-11/0041.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-3303 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200511-04.xml · Vendor Advisory
• http://debian.org/security/2005/dsa-887 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3303 · Security Note
• https://osv.dev/vulnerability/CVE-2005-3303 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10685-1 · Vendor Advisory
• http://sourceforge.net/project/shownotes.php?release_id=368319 · Patch
• http://zerodayinitiative.com/advisories/ZDI-05-002.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2005:205 · Vendor Advisory
• https://suse.com/security/cve/CVE-2017-12374 · Note
• http://securityreason.com/securityalert/146 · Note
• https://suse.com/security/cve/CVE-2007-0897 · Note