CVE-2005-3303
The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 through 0.87 allows remote attackers to...
The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 through 0.87 allows remote attackers to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file.
Exploit likelihood
What each source reports
NVD Score used
The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 through 0.87 allows remote attackers to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file.
- Record
CVE-2005-3303- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 through 0.87 allows remote attackers to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file.
- Record
CVE-2005-3303- Updated
- 2026-11-02
EUVDEUVD-2005-3302 No score
The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 through 0.87 allows remote attackers to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file.
- Record
EUVD-2005-3302- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2q9p-89g6-mqmh No score
The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 through 0.87 allows remote attackers to...
The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 through 0.87 allows remote attackers to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file.
- Record
GHSA-2q9p-89g6-mqmh- Updated
- 2026-11-02
OSV No score
The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 through 0.87 allows remote attackers to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file.
- Record
CVE-2005-3303- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-3303 No score
The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 through 0.87 allows remote attackers to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file.
- Record
DEBIAN-CVE-2005-3303- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10685-1 No score
clamav-0.103.3-1.4 on GA media
These are all security issues fixed in the clamav-0.103.3-1.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10685-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
clamavDebian:12 |
before 0.87.1-1 | 0.87.1-1 |
clamavDebian:13 |
before 0.87.1-1 | 0.87.1-1 |
clamavDebian:14 |
before 0.87.1-1 | 0.87.1-1 |
clamavDebian:3.1 From an advisory covering 4 CVEs |
before 0.84-2.sarge.6, plus listed versions 0.84-20.84-2.sarge.10.84-2.sarge.20.84-2.sarge.30.84-2.sarge.40.84-2.sarge.5 |
0.84-2.sarge.6 |
clamavDebian:4.0 From an advisory covering 4 CVEs |
before 0.87.1-0etch.1 | 0.87.1-0etch.1 |
clamavopenSUSE:Tumbleweed From an advisory covering 55 CVEs |
before 0.103.3-1.4 | 0.103.3-1.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3303 is a high vulnerability (CVSS 7.5) in Clam Anti-virus Clamav, published November 3, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.93%, the 94th percentile. Fixed in clamav 0.87.1-1.
References
secunia.com/advisories/17451
osvdb.org/20482
gentoo.org/security/en/glsa/glsa-200511-04.xml
zerodayinitiative.com/advisories/ZDI-05-002.html
Show 69 moreShow less
mandriva.com/security/advisories?name=MDKSA-2005:205
securityreason.com/securityalert/146
securityfocus.com/bid/15318
sourceforge.net/project/shownotes.php?release_id=368319
vupen.com/english/advisories/2005/2294
archives.neohapsis.com/archives/bugtraq/2005-11/0041.html
debian.org/security/2005/dsa-887
securitytracker.com/id?1015154
nvd.nist.gov/vuln/detail/CVE-2005-3303
github.com/advisories/GHSA-2q9p-89g6-mqmh
security-tracker.debian.org/tracker/CVE-2005-3303
suse.com/security/cve/CVE-2005-3239