{"id":"CVE-2005-2450","aliases":["DEBIAN-CVE-2005-2450","DSA-776-1","DTSA-3-1","EUVD-2005-2451","GHSA-58m7-x875-69xf"],"status":"published","title":"Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in...","description":"Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03877,"percentile":0.90284,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2005-08-03T04:00:00Z","modified":"2026-10-23T03:47:25Z","fixes":[{"ecosystem":"Debian:12","package":"clamav","fixed_in":["0.86.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"clamav","fixed_in":["0.86.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"clamav","fixed_in":["0.86.2-1"],"sources":["osv"]},{"ecosystem":"Debian:3.1","package":"clamav","fixed_in":["0.84-2.sarge.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.86.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.86.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.86.2-1"}]}]},{"source":"osv","ecosystem":"Debian:3.1","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.84-2.sarge.2"}]}],"versions":["0.84-2","0.84-2.sarge.1"]},{"source":"osv","ecosystem":"Debian:4.0","package":"clamav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.86.2-4etch1"}]}],"bundled":5}],"products":[{"vendor":"clam_anti-virus","product":"clamav"}],"references":[{"url":"http://www.novell.com/linux/security/advisories/2005_18_sr.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200507-25.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.osvdb.org/18258","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://secunia.com/advisories/16250","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/16180","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=112230864412932\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://www.osvdb.org/18259","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://secunia.com/advisories/16229","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000987","tags":["vendor-advisory","x_refsource_CONECTIVA","x_transferred","web"]},{"url":"http://secunia.com/advisories/16296","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.osvdb.org/18257","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://secunia.com/advisories/16458","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/21555","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=344514","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://www.securityfocus.com/bid/14359","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2450"},{"url":"https://github.com/advisories/GHSA-58m7-x875-69xf"},{"url":"https://security-tracker.debian.org/tracker/CVE-2005-2450","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2005-2450","description":"Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.","status":"published","published":"2005-08-03T04:00:00Z","modified":"2024-08-07T22:30:01.841Z","updated_at":"2026-11-02T14:33:37.840038Z"}],"euvd":[{"id":"EUVD-2005-2451","description":"Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.","status":"published","published":"2005-08-03T04:00:00Z","modified":"2024-08-07T22:30:01Z","updated_at":"2026-11-03T01:15:30.566873Z"}],"ghsa":[{"id":"GHSA-58m7-x875-69xf","title":"Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in...","description":"Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.","status":"published","published":"2022-05-01T02:08:19Z","modified":"2023-01-30T05:07:50Z","updated_at":"2026-11-02T14:47:45.889583Z"}],"nvd":[{"id":"CVE-2005-2450","description":"Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.","status":"published","published":"2005-08-03T04:00:00Z","modified":"2026-06-16T22:14:54.41Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:56.147496Z"}],"osv":[{"id":"CVE-2005-2450","description":"Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.","status":"published","published":"2005-08-03T04:00:00Z","modified":"2026-04-10T03:38:10.688464Z","updated_at":"2026-11-02T15:43:56.581247Z"},{"id":"DEBIAN-CVE-2005-2450","description":"Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.","status":"published","published":"2005-08-03T04:00:00Z","modified":"2026-10-23T03:47:25.677569507Z","updated_at":"2026-11-02T15:45:22.831407Z"},{"id":"DSA-776-1","title":"clamav - integer overflows, infinite loop","status":"published","published":"2005-08-16T00:00:00Z","modified":"2026-03-09T02:11:35.300763Z","updated_at":"2026-11-02T15:46:18.716547Z"},{"id":"DTSA-3-1","title":"clamav - denial of service and privilege escalation","status":"published","published":"2005-08-28T00:00:00Z","modified":"2026-03-09T01:01:30.975303Z","updated_at":"2026-11-02T15:46:18.716547Z"}]}}