CVE-2005-1922
Fixed in a distro release EPSS 3%
The MS-Expand file handling in Clam AntiVirus (ClamAV) before 0.86 allows remote attackers to cause a denial of service (file descriptor and memory consumption) via a crafted file that causes repeated errors in the cli_msexpand function.
Products: clam_anti-virus clamav
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | clamav | 0.86.1-1 |
| Debian 13 | clamav | 0.86.1-1 |
| Debian 14 | clamav | 0.86.1-1 |
| Debian 3.1 | clamav | 0.84-2.sarge.1 |
| Debian 4.0 | clamav | 0.86.2-4etch1 |