CVE-2005-3239: Clam Anti-Virus Clamav

High severity, CVSS 7.8. EPSS: 4.5% chance of exploitation in the next 30 days.

The OLE2 unpacker in clamd in Clam AntiVirus (ClamAV) 0.87-1 allows remote attackers to cause a denial of service (segmentation fault) via a DOC file with an invalid property tree, which triggers an infinite recursion in the ole2_walk_property_tree function.

Affected products

• Clam Anti-Virus Clamav: version . only

Published 2005-10-14. Last modified 2026-06-16.