Vulnerability Details CVE-2005-2056
The Quantum archive decompressor in Clam AntiVirus (ClamAV) before 0.86.1 allows remote attackers to cause a denial of service (application crash) via a crafted Quantum archive.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 77.0%
CVSS Severity
CVSS v2 Score 2.6
References
- http://secunia.com/advisories/15811
- http://sourceforge.net/project/shownotes.php?release_id=337279
- http://www.debian.org/security/2005/dsa-737
- http://www.gentoo.org/security/en/glsa/glsa-200506-23.xml
- http://www.novell.com/linux/security/advisories/2005_38_clamav.html
- http://www.securityfocus.com/bid/14058
- http://secunia.com/advisories/15811
- http://sourceforge.net/project/shownotes.php?release_id=337279
- http://www.debian.org/security/2005/dsa-737
- http://www.gentoo.org/security/en/glsa/glsa-200506-23.xml
- http://www.novell.com/linux/security/advisories/2005_38_clamav.html
- http://www.securityfocus.com/bid/14058
Products affected by CVE-2005-2056
-
cpe:2.3:a:clam_anti-virus:clamav:0.85
-
cpe:2.3:a:clam_anti-virus:clamav:0.85.1
-
cpe:2.3:a:clam_anti-virus:clamav:0.86