CVE-2005-3501: Clamav

Medium severity, CVSS 4.3. EPSS: 3.6% chance of exploitation in the next 30 days.

The cabd_find function in cabd.c of the libmspack library (mspack) for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted CAB file that causes cabd_find to be called with a zero length.

Affected products

• Clamav Clamav: up to and including 0.87; version 0.01 only; version 0.02 only; version 0.3 only; version 0.03 only; version 0.05 only; …

Published 2005-11-05. Last modified 2026-06-16.