Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.6
CVE-2005-2056: ClamAV may crash when opening malicious Quantum archive
CVE-2005-2056 · published 21 years ago
Summary
The Clam AntiVirus program can stop working if it tries to decompress a specially crafted Quantum archive file. This could interrupt scanning and other security functions. Upgrade to version 0.86.1 or later to prevent the crash.
What to do
- Update debian clamav to version 0.86.1-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | clamav |
< 0.86.1-1 Fix: upgrade to 0.86.1-1
|
| Debian:13 | debian | clamav |
< 0.86.1-1 Fix: upgrade to 0.86.1-1
|
| Debian:14 | debian | clamav |
< 0.86.1-1 Fix: upgrade to 0.86.1-1
|
| – | clam_anti-virus | clamav |
0.85 0.85.1 0.86 cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:* |
Original advisory text
The Quantum archive decompressor in Clam AntiVirus (ClamAV) before 0.86.1 allows remote attackers to cause a denial of service (application crash) via a crafted Quantum archive.
The Quantum archive decompressor in Clam AntiVirus (ClamAV) before 0.86.1 allows remote attackers to cause a denial of service (application crash) via a crafted Quantum archive.
References
- https://security-tracker.debian.org/tracker/CVE-2005-2056 Vendor Advisory
- http://secunia.com/advisories/15811
- http://sourceforge.net/project/shownotes.php?release_id=337279 Patch
- http://www.debian.org/security/2005/dsa-737
- http://www.gentoo.org/security/en/glsa/glsa-200506-23.xml Patch Vendor Advisory
- http://www.novell.com/linux/security/advisories/2005_38_clamav.html
- http://www.securityfocus.com/bid/14058
Severity
2.6
Low
Timeline
Published29 Jun 2005
Updated29 Oct 2026
First seen8 Sep 2026
Track software like this
Free during beta