Vulnerability Details CVE-2005-1922
The MS-Expand file handling in Clam AntiVirus (ClamAV) before 0.86 allows remote attackers to cause a denial of service (file descriptor and memory consumption) via a crafted file that causes repeated errors in the cli_msexpand function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.7%
CVSS Severity
CVSS v2 Score 5.0
References
- http://sourceforge.net/project/shownotes.php?release_id=336462
- http://www.debian.org/security/2005/dsa-737
- http://www.idefense.com/application/poi/display?id=276&type=vulnerabilities&flashstatus=true
- http://sourceforge.net/project/shownotes.php?release_id=336462
- http://www.debian.org/security/2005/dsa-737
- http://www.idefense.com/application/poi/display?id=276&type=vulnerabilities&flashstatus=true
Products affected by CVE-2005-1922
-
cpe:2.3:a:clam_anti-virus:clamav:0.81
-
cpe:2.3:a:clam_anti-virus:clamav:0.82
-
cpe:2.3:a:clam_anti-virus:clamav:0.83
-
cpe:2.3:a:clam_anti-virus:clamav:0.84_rc1
-
cpe:2.3:a:clam_anti-virus:clamav:0.84_rc2
-
cpe:2.3:a:clam_anti-virus:clamav:0.85
-
cpe:2.3:a:clam_anti-virus:clamav:0.85.1