VDB
CVE-2005-3500
CVE-2005-3500
PUBLISHED
CVSS 5 MEDIUM
The tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via a crafted value in a CAB file that causes ClamAV to repeatedly scan the same block.
EPSS 3.96% · 90.4th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
3.96%
90.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| clam_anti-virus | clamav | 0.15, 0.21, 0.23 |
Timeline
- CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 5, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
- Nov 3, 2023 EPSS Score
References
- 152 third-party-advisory
- 17184 third-party-advisory
- MDKSA-2005:205 vendor-advisory
- 15316 vdb
- 17434 third-party-advisory
- GLSA-200511-04 vendor-advisory
- http://securitytracker.com/id?1015154 url
- http://sourceforge.net/project/shownotes.php?release_id=368319 url
- http://secunia.com/advisories/17501 technical
- http://www.osvdb.org/20483 technical
- http://www.vupen.com/english/advisories/2005/2294 technical
- http://secunia.com/advisories/17451 technical
- http://www.debian.org/security/2005/dsa-887 technical
- http://www.idefense.com/application/poi/display?id=333&type=vulnerabilities patch
- https://nvd.nist.gov/vuln/detail/CVE-2005-3500 advisory
- http://secunia.com/advisories/17559 url