Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.0
CVE-2005-0133: ClamAV on Debian can crash when processing bad ZIP
CVE-2005-0133 · published 21 years ago
Summary
The ClamAV scanning service on Debian can stop working if it receives a specially crafted ZIP file with incorrect headers. This could interrupt virus scanning and cause temporary downtime. Update ClamAV to the latest version or apply the vendor's security patch to prevent the crash.
What to do
- Update debian clamav to version 0.80-0.81rc1-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | clamav |
< 0.80-0.81rc1-1 Fix: upgrade to 0.80-0.81rc1-1
|
| Debian:13 | debian | clamav |
< 0.80-0.81rc1-1 Fix: upgrade to 0.80-0.81rc1-1
|
| Debian:14 | debian | clamav |
< 0.80-0.81rc1-1 Fix: upgrade to 0.80-0.81rc1-1
|
| – | clam_anti-virus | clamav |
0.51 0.52 0.53 0.54 0.60 0.65 0.67 0.68 0.68.1 0.80 cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:* |
Original advisory text
ClamAV 0.80 and earlier allows remote attackers to cause a denial of service (clamd daemon crash) via a ZIP file with malformed headers.
ClamAV 0.80 and earlier allows remote attackers to cause a denial of service (clamd daemon crash) via a ZIP file with malformed headers.
References
- https://security-tracker.debian.org/tracker/CVE-2005-0133 Vendor Advisory
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000928 Patch Vendor Advisory
- http://sourceforge.net/project/shownotes.php?release_id=300116 Patch
- http://www.gentoo.org/security/en/glsa/glsa-200501-46.xml Patch Vendor Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:025
- http://www.trustix.org/errata/2005/0003/ Patch Vendor Advisory
Severity
5.0
Medium
Timeline
Published2 May 2005
Updated30 Oct 2026
First seen26 Sep 2026
Track software like this
Free during beta