Lucene search

K
cve[email protected]CVE-2005-2920
HistorySep 20, 2005 - 11:03 p.m.

CVE-2005-2920

2005-09-2023:03:00
web.nvd.nist.gov
112
cve-2005-2920
buffer overflow
clam antivirus
clamav
upx packed executable
security vulnerability
remote code execution

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.331 Low

EPSS

Percentile

97.1%

Buffer overflow in libclamav/upx.c in Clam AntiVirus (ClamAV) before 0.87 allows remote attackers to execute arbitrary code via a crafted UPX packed executable.

Affected configurations

NVD
Node
clam_anti-virusclamavMatch0.70
OR
clam_anti-virusclamavMatch0.71
OR
clam_anti-virusclamavMatch0.72
OR
clam_anti-virusclamavMatch0.73
OR
clam_anti-virusclamavMatch0.74
OR
clam_anti-virusclamavMatch0.75
OR
clam_anti-virusclamavMatch0.75.1
OR
clam_anti-virusclamavMatch0.80
OR
clam_anti-virusclamavMatch0.81
OR
clam_anti-virusclamavMatch0.82
OR
clam_anti-virusclamavMatch0.83
OR
clam_anti-virusclamavMatch0.84
OR
clam_anti-virusclamavMatch0.85
OR
clam_anti-virusclamavMatch0.85.1
OR
clam_anti-virusclamavMatch0.86
OR
clam_anti-virusclamavMatch0.86.1
OR
clam_anti-virusclamavMatch0.86.2

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.331 Low

EPSS

Percentile

97.1%