CVE-2005-1923 describes a denial-of-service vulnerability affecting Clam AntiVirus (ClamAV) versions prior to 0.86. Specifically, a remote attacker can trigger an infinite loop and high CPU consumption by providing a specially crafted cabinet (CAB) file where the cffile_FolderOffset field is set to 0xff, leading to a zero-length read. The severity of this vulnerability is rated as low (CVSS 2.6), with a network attack vector and high attack complexity, resulting in a potential impact of partial denial of service. There is no evidence of active exploitation, nor is exploit code publicly available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog and is considered inactive on the Hot List.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
0.83CPE matchmatch criteria | cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:* | ||
0.84_rc1CPE matchmatch criteria | cpe:2.3:a:clam_anti-virus:clamav:0.84_rc1:*:*:*:*:*:*:* | ||
0.84_rc2CPE matchmatch criteria | cpe:2.3:a:clam_anti-virus:clamav:0.84_rc2:*:*:*:*:*:*:* | ||
0.85CPE matchmatch criteria | cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:* | ||
0.85.1CPE matchmatch criteria | cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:H/Au:N/C:N/I:N/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.3 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.