4.3

CVE-2005-3501

Exploit
The cabd_find function in cabd.c of the libmspack library (mspack) for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted CAB file that causes cabd_find to be called with a zero length.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Clamav ≫ Clamav Version <= 0.87
Clamav ≫ Clamav Version 0.01
Clamav ≫ Clamav Version 0.02
Clamav ≫ Clamav Version 0.3
Clamav ≫ Clamav Version 0.03
Clamav ≫ Clamav Version 0.05
Clamav ≫ Clamav Version 0.8 Update rc3
Clamav ≫ Clamav Version 0.10
Clamav ≫ Clamav Version 0.12
Clamav ≫ Clamav Version 0.13
Clamav ≫ Clamav Version 0.14
Clamav ≫ Clamav Version 0.14 Update pre
Clamav ≫ Clamav Version 0.15
Clamav ≫ Clamav Version 0.20
Clamav ≫ Clamav Version 0.21
Clamav ≫ Clamav Version 0.22
Clamav ≫ Clamav Version 0.23
Clamav ≫ Clamav Version 0.24
Clamav ≫ Clamav Version 0.51
Clamav ≫ Clamav Version 0.52
Clamav ≫ Clamav Version 0.53
Clamav ≫ Clamav Version 0.54
Clamav ≫ Clamav Version 0.60
Clamav ≫ Clamav Version 0.60p
Clamav ≫ Clamav Version 0.65
Clamav ≫ Clamav Version 0.66
Clamav ≫ Clamav Version 0.67
Clamav ≫ Clamav Version 0.67-1
Clamav ≫ Clamav Version 0.68
Clamav ≫ Clamav Version 0.68.1
Clamav ≫ Clamav Version 0.70
Clamav ≫ Clamav Version 0.70 Update rc
Clamav ≫ Clamav Version 0.71
Clamav ≫ Clamav Version 0.72
Clamav ≫ Clamav Version 0.73
Clamav ≫ Clamav Version 0.74
Clamav ≫ Clamav Version 0.75
Clamav ≫ Clamav Version 0.75.1
Clamav ≫ Clamav Version 0.80
Clamav ≫ Clamav Version 0.80 Update rc
Clamav ≫ Clamav Version 0.80 Update rc1
Clamav ≫ Clamav Version 0.80 Update rc2
Clamav ≫ Clamav Version 0.80 Update rc3
Clamav ≫ Clamav Version 0.80 Update rc4
Clamav ≫ Clamav Version 0.80_rc
Clamav ≫ Clamav Version 0.81
Clamav ≫ Clamav Version 0.81 Update rc1
Clamav ≫ Clamav Version 0.82
Clamav ≫ Clamav Version 0.83
Clamav ≫ Clamav Version 0.84
Clamav ≫ Clamav Version 0.84 Update rc1
Clamav ≫ Clamav Version 0.84 Update rc2
Clamav ≫ Clamav Version 0.85
Clamav ≫ Clamav Version 0.85.1
Clamav ≫ Clamav Version 0.86
Clamav ≫ Clamav Version 0.86 Update rc1
Clamav ≫ Clamav Version 0.86.1
Clamav ≫ Clamav Version 0.86.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.59% 0.879
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/17559
Vendor Advisory
http://secunia.com/advisories/17184
Vendor Advisory
http://secunia.com/advisories/17451
Vendor Advisory
http://secunia.com/advisories/17501
Vendor Advisory
http://securitytracker.com/id?1015154
http://sourceforge.net/project/shownotes.php?release_id=368319
Patch
http://www.debian.org/security/2005/dsa-887
http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2005:205
http://secunia.com/advisories/17434
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2005/2294
Vendor Advisory
http://securityreason.com/securityalert/150
http://www.idefense.com/application/poi/display?id=334&type=vulnerabilities
Patch
Vendor Advisory
Exploit
http://www.osvdb.org/20484
http://www.securityfocus.com/bid/15317