CVE-2005-2450

EPSS 3.64%
Veröffentlicht 03.08.2005 04:00:00
Zuletzt bearbeitet 16.04.2026 00:27:16
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 18

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Clam Anti-virus ≫ Clamav Version0.85

Clam Anti-virus ≫ Clamav Version0.85.1

Clam Anti-virus ≫ Clamav Version0.86

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.64%	0.867

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.novell.com/linux/security/advisories/2005_18_sr.html

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000987

http://marc.info/?l=bugtraq&m=112230864412932&w=2

http://secunia.com/advisories/16180

http://secunia.com/advisories/16229

http://secunia.com/advisories/16250

http://secunia.com/advisories/16296

http://secunia.com/advisories/16458

http://security.gentoo.org/glsa/glsa-200507-25.xml

http://sourceforge.net/project/shownotes.php?release_id=344514

Patch

http://www.osvdb.org/18257

http://www.osvdb.org/18258

http://www.osvdb.org/18259

http://www.securityfocus.com/bid/14359

https://exchange.xforce.ibmcloud.com/vulnerabilities/21555

https://nvd.nist.gov/vuln/detail/CVE-2005-2450

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-2450

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-2450

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2005-2450