What’s Vulnerable › Vulnerabilities

CVE-2003-0946

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2003-12-15 · updated 2026-06-16

Description

Format string vulnerability in clamav-milter for Clam AntiVirus 0.60 through 0.60p, and other versions before 0.65, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the email address argument of a "MAIL FROM" command.

Affected products

• Clam Anti-Virus Clamav: 0.60, 0.60p

References

• http://marc.info/?l=bugtraq&m=106867135830683&w=2
• http://sourceforge.net/project/shownotes.php?release_id=197038
• http://marc.info/?l=bugtraq&m=106867135830683&w=2
• http://sourceforge.net/project/shownotes.php?release_id=197038

Get alerted when CVE-2003-0946 or the next vulnerability affects your stack