CVE-2005-3303

Description

The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 through 0.87 allows remote attackers to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file.

7.5

CVSS

Severity: High

CVSS 2.0 •

EPSS 9.94% Top 10%

Vendor Advisory gentoo.org Vendor Advisory mandriva.com Vendor Advisory debian.org Vendor Advisory neohapsis.com Vendor Advisory secunia.com Vendor Advisory zerodayinitiative.com

Affected: n/a n/a

References

Link	Tags
http://secunia.com/advisories/17451	third party advisory
http://www.osvdb.org/20482	vdb entry
http://www.gentoo.org/security/en/glsa/glsa-200511-04.xml	vendor advisory
http://secunia.com/advisories/17501	third party advisory
http://secunia.com/advisories/17184	third party advisory
http://www.zerodayinitiative.com/advisories/ZDI-05-002.html	patch vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:205	vendor advisory
http://secunia.com/advisories/17559	third party advisory
http://securityreason.com/securityalert/146	third party advisory
http://www.securityfocus.com/bid/15318	vdb entry
http://secunia.com/advisories/17448	third party advisory
http://sourceforge.net/project/shownotes.php?release_id=368319	patch
http://www.vupen.com/english/advisories/2005/2294	vdb entry
http://archives.neohapsis.com/archives/bugtraq/2005-11/0041.html	mailing list patch vendor advisory
http://www.debian.org/security/2005/dsa-887	vendor advisory
http://secunia.com/advisories/17434	third party advisory patch vendor advisory
http://securitytracker.com/id?1015154	vdb entry

Frequently Asked Questions

What is the severity of CVE-2005-3303?: CVE-2005-3303 has been scored as a high severity vulnerability.
How to fix CVE-2005-3303?: To fix CVE-2005-3303, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2005-3303 being actively exploited in the wild?: It is possible that CVE-2005-3303 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~10% probability that this vulnerability will be exploited by malicious actors in the next 30 days.