The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV) 0.83, and other versions vefore 0.86, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a cabinet (CAB) file with the cffile_FolderOffset field set to 0xff, which causes a zero-length read.
                
            References
                    | Link | Resource | 
|---|---|
| http://www.debian.org/security/2005/dsa-737 | |
| http://www.idefense.com/application/poi/display?id=275&type=vulnerabilities | Patch Vendor Advisory | 
| http://www.debian.org/security/2005/dsa-737 | |
| http://www.idefense.com/application/poi/display?id=275&type=vulnerabilities | Patch Vendor Advisory | 
Configurations
                    Configuration 1 (hide)
| 
 | 
History
                    20 Nov 2024, 23:58
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://www.debian.org/security/2005/dsa-737 - | |
| References | () http://www.idefense.com/application/poi/display?id=275&type=vulnerabilities - Patch, Vendor Advisory | 
Information
                Published : 2005-07-05 04:00
Updated : 2025-04-03 01:03
NVD link : CVE-2005-1923
Mitre link : CVE-2005-1923
CVE.ORG link : CVE-2005-1923
JSON object : View
Products Affected
                clam_anti-virus
- clamav
CWE
                