CVE-2005-2450: Clam Anti-Virus Clamav

High severity, CVSS 7.5. EPSS: 3.9% chance of exploitation in the next 30 days.

Multiple integer overflows in the (1) TNEF, (2) CHM, or (3) FSG file format processors in libclamav for Clam AntiVirus (ClamAV) 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.

Affected products

• Clam Anti-Virus Clamav: version 0.85 only; version 0.85.1 only; version 0.86 only

Published 2005-08-03. Last modified 2026-06-16.