CVE-2004-0270
libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via...
libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail message with an invalid line length (e.g., a lowercase character), which causes an assert error in clamd that terminates the calling program.
Exploit likelihood
What each source reports
NVD Score used
libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail message with an invalid line length (e.g., a lowercase character), which causes an assert error in clamd that terminates the calling program.
- Record
CVE-2004-0270- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail message with an invalid line length (e.g., a lowercase character), which causes an assert error in clamd that terminates the calling program.
- Record
CVE-2004-0270- Updated
- 2026-11-02
EUVDEUVD-2004-0270 No score
libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail message with an invalid line length (e.g., a lowercase character), which causes an assert error in clamd that terminates the calling program.
- Record
EUVD-2004-0270- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mr7m-j7jh-35hw No score
libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via...
libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail message with an invalid line length (e.g., a lowercase character), which causes an assert error in clamd that terminates the calling program.
- Record
GHSA-mr7m-j7jh-35hw- Updated
- 2026-11-02
OSV No score
libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail message with an invalid line length (e.g., a lowercase character), which causes an assert error in clamd that terminates the calling program.
- Record
CVE-2004-0270- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0270 No score
libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail message with an invalid line length (e.g., a lowercase character), which causes an assert error in clamd that terminates the calling program.
- Record
DEBIAN-CVE-2004-0270- Updated
- 2026-11-02
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | ClamAV Daemon 0.65 - UUEncoded Message Denial of Service | 2004-02-09 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0270 is a medium vulnerability (CVSS 5.0) in Clam Anti-virus Clamav, published September 1, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 10.4%, the 95th percentile. Fixed in clamav 0.80.
References
security.gentoo.org/glsa/glsa-200402-07.xml
freebsd.org/cgi/query-pr.cgi?pr=62586
securityfocus.com/bid/9610
marc.info?l=bugtraq&m=107634700823822&w=2
osvdb.org/3894
exchange.xforce.ibmcloud.com/vulnerabilities/15077
nvd.nist.gov/vuln/detail/CVE-2004-0270
github.com/advisories/GHSA-mr7m-j7jh-35hw
security-tracker.debian.org/tracker/CVE-2004-0270