VULNERABILITY INTELLIGENCE

CVE-2005-3500

CVSS score5 MEDIUM
EPSS probability3.96%
CISA KEVNot currently listed
Published2005-11-05
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via a crafted value in a CAB file that causes ClamAV to repeatedly scan the same block.

Primary references