CVE:CVE-2005-1922
CNNVD:CNNVD-200507-024
Clam AntiVirus一款开源的杀毒工具包。
Clam AntiVirus 0.86之前版本存在拒绝服务漏洞。
由于对MS-Expand文件处理存在问题，远程攻击者可通过特别构造对文件，导致cli_msexpand函数报错，从而耗尽文件描述符池和内存，导致拒绝服务。
solution:Upgrade clam_anti-virus clamav to a higher version than 0.81,0.82,0.83,0.84_rc1,0.84_rc2,0.85,0.85.1,and avoid the version 0.81,0.82,0.83,0.84_rc1,0.84_rc2,0.85,0.85.1