CVE-2005-2450
Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in...
Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.
Exploit likelihood
What each source reports
NVD Score used
Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.
- Record
CVE-2005-2450- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.
- Record
CVE-2005-2450- Updated
- 2026-11-02
EUVDEUVD-2005-2451 No score
Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.
- Record
EUVD-2005-2451- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-58m7-x875-69xf No score
Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in...
Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.
- Record
GHSA-58m7-x875-69xf- Updated
- 2026-11-02
OSV No score
Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.
- Record
CVE-2005-2450- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-2450 No score
Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.
- Record
DEBIAN-CVE-2005-2450- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
clamavDebian:12 |
before 0.86.2-1 | 0.86.2-1 |
clamavDebian:13 |
before 0.86.2-1 | 0.86.2-1 |
clamavDebian:14 |
before 0.86.2-1 | 0.86.2-1 |
clamavDebian:3.1 |
before 0.84-2.sarge.2, plus listed versions 0.84-20.84-2.sarge.1 |
0.84-2.sarge.2 |
clamavDebian:4.0 From an advisory covering 5 CVEs |
before 0.86.2-4etch1 | 0.86.2-4etch1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2450 is a high vulnerability (CVSS 7.5) in Clam Anti-virus Clamav, published August 3, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.88%, the 90th percentile. Fixed in clamav 0.86.2-1.
References
novell.com/linux/security/advisories/2005_18_sr.html
security.gentoo.org/glsa/glsa-200507-25.xml
osvdb.org/18258
secunia.com/advisories/16250
marc.info?l=bugtraq&m=112230864412932&w=2
Show 12 moreShow less
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000987
exchange.xforce.ibmcloud.com/vulnerabilities/21555
sourceforge.net/project/shownotes.php?release_id=344514
securityfocus.com/bid/14359
nvd.nist.gov/vuln/detail/CVE-2005-2450
github.com/advisories/GHSA-58m7-x875-69xf
security-tracker.debian.org/tracker/CVE-2005-2450