Patchwire CVEs, their patch status, and feeds to follow them

CVE-2005-3500

Fixed in a distro release EPSS 4%

The tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via a crafted value in a CAB file that causes ClamAV to repeatedly scan the same block.

Published 2005-11-05 · CVE record · OSV

Products: clam_anti-virus clamav

Distro releases

ReleasePackageFixed in
Debian 12clamav0.87.1-1
Debian 13clamav0.87.1-1
Debian 14clamav0.87.1-1
Debian 3.1clamav0.84-2.sarge.6
Debian 4.0clamav0.87.1-0etch.1