CVE-2005-1923

2005-07-0500:00:00

ubuntu.com

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

EPSS

0.002

Percentile

53.6%

JSON

The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and
other versions vefore 0.86, allows remote attackers to cause a denial of
service (CPU consumption by infinite loop) via a cabinet (CAB) file with
the cffile_FolderOffset field set to 0xff, which causes a zero-length read.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchclamav< 0.88.2-1ubuntu1.3UNKNOWN
ubuntu6.10noarchclamav< 0.88.4-1ubuntu2.1UNKNOWN
ubuntu7.04noarchclamav< 0.90.2-0ubuntu1.3UNKNOWN