CVE-2005-0133

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

ClamAV 0.80 and earlier allows remote attackers to cause a denial of service (clamd daemon crash) via a ZIP file with malformed headers.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000928Patch, Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=300116Patch
http://www.gentoo.org/security/en/glsa/glsa-200501-46.xmlPatch, Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:025
http://www.trustix.org/errata/2005/0003/Patch, Vendor Advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000928Patch, Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=300116Patch
http://www.gentoo.org/security/en/glsa/glsa-200501-46.xmlPatch, Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:025
http://www.trustix.org/errata/2005/0003/Patch, Vendor Advisory

Timeline

Published: May 2, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-01344.6The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow attackers to hij CVE-2005-01352.1The unw_unwind_to_user function in unwind.c on Itanium (ia64) architectures in Linux kernel 2.6 allows local users to cause a denial of serv CVE-2005-01362.1The Linux kernel before 2.6.11 on the Itanium IA64 platform has certain "ptrace corner cases" that allow local users to cause a denial of se CVE-2005-01372.1Linux kernel 2.6 on Itanium (ia64) architectures allows local users to cause a denial of service via a "missing Itanium syscall table entry.CVE-2005-01387.5rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not correctly allow access to anonymous clients that connect from a system whose host CVE-2005-01397.5Unknown vulnerability in rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not sufficiently restrict access rights for read-mostly expo CVE-2005-01407.5Buffer overflow in PeID allows attackers to execute arbitrary code via a PE file with an Import Address Table containing a long import libra CVE-2005-01412.6Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to load local files via links "with a custom getter and toString method" CVE-2005-01422.1Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permission CVE-2005-01432.6Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which c CVE-2005-01442.6Firefox before 1.0 and Mozilla before 1.7.5 display the secure site lock icon when a view-source: URL references a secure SSL site while an CVE-2005-01452.6Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Jav