Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-afs1-pn6y-2qej
Vulnerability ID VCID-afs1-pn6y-2qej
Aliases CVE-2005-3239
Summary The OLE2 unpacker in clamd in Clam AntiVirus (ClamAV) 0.87-1 allows remote attackers to cause a denial of service (segmentation fault) via a DOC file with an invalid property tree, which triggers an infinite recursion in the ole2_walk_property_tree function.
Status Published
Exploitability 0.5
Weighted Severity 7.0
Risk 3.5
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.04594 https://api.first.org/data/v1/epss?cve=CVE-2005-3239
epss 0.04594 https://api.first.org/data/v1/epss?cve=CVE-2005-3239
epss 0.04594 https://api.first.org/data/v1/epss?cve=CVE-2005-3239
epss 0.04594 https://api.first.org/data/v1/epss?cve=CVE-2005-3239
epss 0.04594 https://api.first.org/data/v1/epss?cve=CVE-2005-3239
epss 0.04594 https://api.first.org/data/v1/epss?cve=CVE-2005-3239
epss 0.04594 https://api.first.org/data/v1/epss?cve=CVE-2005-3239
epss 0.04594 https://api.first.org/data/v1/epss?cve=CVE-2005-3239
epss 0.04594 https://api.first.org/data/v1/epss?cve=CVE-2005-3239
cvssv2 7.8 https://nvd.nist.gov/vuln/detail/CVE-2005-3239
Reference id Reference type URL
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=333566
https://api.first.org/data/v1/epss?cve=CVE-2005-3239
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3239
http://secunia.com/advisories/17184
http://secunia.com/advisories/17448
http://secunia.com/advisories/17451
http://secunia.com/advisories/17501
http://secunia.com/advisories/17559
http://securitytracker.com/id?1015154
http://sourceforge.net/project/shownotes.php?release_id=368319
http://www.debian.org/security/2005/dsa-887
http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2005:205
http://www.osvdb.org/20536
http://www.securityfocus.com/bid/15101
333566 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=333566
cpe:2.3:a:clam_anti-virus:clamav:.:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:.:*:*:*:*:*:*:*
CVE-2005-3239 https://nvd.nist.gov/vuln/detail/CVE-2005-3239
No exploits are available.
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C Found at https://nvd.nist.gov/vuln/detail/CVE-2005-3239
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.89191
EPSS Score 0.04594
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T16:30:06.990254+00:00 Debian Oval Importer Import https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.0.0