CVE-2005-2450

EPSS 3.64%
Veröffentlicht 03.08.2005 04:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 18

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Clam Anti-virus ≫ Clamav Version0.85

Clam Anti-virus ≫ Clamav Version0.85.1

Clam Anti-virus ≫ Clamav Version0.86

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.64%	0.867

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://www.novell.com/linux/security/advisories/2005_18_sr.html

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000987

http://marc.info/?l=bugtraq&m=112230864412932&w=2

http://secunia.com/advisories/16180

http://secunia.com/advisories/16229

http://secunia.com/advisories/16250

http://secunia.com/advisories/16296

http://secunia.com/advisories/16458

http://security.gentoo.org/glsa/glsa-200507-25.xml

http://sourceforge.net/project/shownotes.php?release_id=344514

Patch

http://www.osvdb.org/18257

http://www.osvdb.org/18258

http://www.osvdb.org/18259

http://www.securityfocus.com/bid/14359

https://exchange.xforce.ibmcloud.com/vulnerabilities/21555

https://nvd.nist.gov/vuln/detail/CVE-2005-2450

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-2450

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-2450

EUVD