FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-1923

This CVE name corresponds to:

Entered Topic
2005-07-06 clamav -- cabinet file handling DoS vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-1923 at cve.mitre.org

Details

Type Candidate
Name CVE-2005-1923
Phase Assigned(20050608)

Description

The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a cabinet (CAB) file with the cffile_FolderOffset field set to 0xff, which causes a zero-length read.

References

Source Reference
IDEFENSE 20050629 Clam AntiVirus ClamAV Cabinet File Handling DoS Vulnerability
DEBIAN DSA-737

Copyright © 2005 The MITRE Corporation.

Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright information.