Search for vulnerabilities
Vulnerability details: VCID-mndf-yua6-aaar
Vulnerability ID VCID-mndf-yua6-aaar
Aliases CVE-2005-3500
Summary The tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via a crafted value in a CAB file that causes ClamAV to repeatedly scan the same block.
Status Published
Exploitability 0.5
Weighted Severity 4.5
Risk 2.2
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.0502 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.05935 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.18623 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.18623 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.18623 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.31473 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.31473 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.31473 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.31473 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.31473 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.31473 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.31473 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.31473 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.31473 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.31473 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.31473 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
epss 0.31473 https://api.first.org/data/v1/epss?cve=CVE-2005-3500
cvssv2 5.0 https://nvd.nist.gov/vuln/detail/CVE-2005-3500
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2005-3500
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3500
http://secunia.com/advisories/17184
http://secunia.com/advisories/17434
http://secunia.com/advisories/17451
http://secunia.com/advisories/17501
http://secunia.com/advisories/17559
http://securityreason.com/securityalert/152
http://securitytracker.com/id?1015154
http://sourceforge.net/project/shownotes.php?release_id=368319
http://www.debian.org/security/2005/dsa-887
http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml
http://www.idefense.com/application/poi/display?id=333&type=vulnerabilities
http://www.mandriva.com/security/advisories?name=MDKSA-2005:205
http://www.osvdb.org/20483
http://www.securityfocus.com/bid/15316
http://www.vupen.com/english/advisories/2005/2294
cpe:2.3:a:clam_anti-virus:clamav:0.15:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.15:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.20:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.20:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.21:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.21:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.22:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.22:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.23:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.23:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.24:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.24:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.71:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.71:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.72:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.72:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.73:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.73:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.74:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.74:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.75:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.75:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*
CVE-2005-3500 https://nvd.nist.gov/vuln/detail/CVE-2005-3500
GLSA-200511-04 https://security.gentoo.org/glsa/200511-04
No exploits are available.
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2005-3500
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.82504
EPSS Score 0.0502
Published At March 29, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
There are no relevant records.