CVE-2005-3303: Clam Anti-Virus Clamav

High severity, CVSS 7.5. EPSS: 6.9% chance of exploitation in the next 30 days.

The FSG unpacker (fsg.c) in Clam AntiVirus (ClamAV) 0.80 through 0.87 allows remote attackers to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file.

Affected products

• Clam Anti-Virus Clamav: version 0.80 only; version 0.81 only; version 0.82 only; version 0.83 only; version 0.84 only; version 0.85 only; …

Published 2005-11-05. Last modified 2026-06-16.