FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-1922

This CVE name corresponds to:

Entered	Topic
2005-07-06	clamav -- MS-Expand file handling DoS vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-1922 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-1922
Phase	Assigned(20050608)

Description

The MS-Expand file handling in Clam AntiVirus (ClamAV) before 0.86 allows remote attackers to cause a denial of service (file descriptor and memory consumption) via a crafted file that causes repeated errors in the cli_msexpand function.

References

Source	Reference
IDEFENSE	20050629 Clam AntiVirus ClamAV MS-Expand File Handling DoS Vulnerability
CONFIRM	http://sourceforge.net/project/shownotes.php?release_id=336462
DEBIAN	DSA-737