Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2005-1923

The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a cabinet (CAB) file with the cffile_FolderOffset field set to 0xff, which causes a zero-length read.

  • Published: Jul 5, 2005
  • Updated: Apr 13, 2023
  • CVE: CVE-2005-1923
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 2.6
  • AV:N/AC:H/Au:N/C:N/I:N/A:P

No CWE or OWASP classifications available.

Software From Fixed in
clam_anti-virus / clamav 0.84_rc1 0.84_rc1.x
clam_anti-virus / clamav 0.85.1 0.85.1.x
clam_anti-virus / clamav 0.85 0.85.x
clam_anti-virus / clamav 0.83 0.83.x
clam_anti-virus / clamav 0.84_rc2 0.84_rc2.x