Back to Database
Status published
Low
CVE-2005-1923
The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83,...
Vulnerability Description
The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a cabinet (CAB) file with the cffile_FolderOffset field set to 0xff, which causes a zero-length read.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-1923
Credits & Attribution
No credits recorded in the NVD database.
References
More from clam anti-virus
View All →CVE-2008-5314
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows...
Medium
4.3
CVE-2008-5050
Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus...
Critical
9.3
CVE-2008-3215
libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause...
Medium
5
CVE-2008-2713
libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause...
Medium
5
CVE-2008-1837
libclamunrar in ClamAV before 0.93 allows remote attackers to cause...
Medium
5
Affected Vendor
clam anti-virus
View all reports →Affected Software
clamav
Vulnerable Versions:
0.83, 0.84_rc1, 0.84_rc2, 0.85, 0.85.1
Timeline
Official Publish:
June 30th, 2005
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.