CVE-2005-2450

Description

Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/21555

https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-2451

http://www.securityfocus.com/bid/14359

http://www.osvdb.org/18259

http://www.osvdb.org/18258

http://www.osvdb.org/18257

http://www.novell.com/linux/security/advisories/2005_18_sr.html

http://sourceforge.net/project/shownotes.php?release_id=344514

http://security.gentoo.org/glsa/glsa-200507-25.xml

http://secunia.com/advisories/16458

http://secunia.com/advisories/16296

http://secunia.com/advisories/16250

http://secunia.com/advisories/16229

http://secunia.com/advisories/16180

http://marc.info/?l=bugtraq&m=112230864412932&w=2

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000987

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS