← Database

CVE-2005-3500

MEDIUM CVSS: 5.0 Published: 2005-11-05 Modified: 2026-06-16

Description

The tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via a crafted value in a CAB file that causes ClamAV to repeatedly scan the same block.

Affected Platforms

Clam Anti-Virus Clamav

Weakness Type

NVD-CWE-Other

References