What’s Vulnerable › Vulnerabilities

CVE-2005-0218

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-05-02 · updated 2026-06-16

Description

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: (RFC 2397) URL.

Affected products

• Clam Anti-Virus Clamav: 0.51, 0.52, 0.53, 0.54, 0.60, 0.65 (+4)

References

• http://seclists.org/lists/fulldisclosure/2005/Jan/0332.html
• http://seclists.org/lists/fulldisclosure/2005/Jan/0537.html
• http://secunia.com/advisories/13900/
• http://sourceforge.net/project/shownotes.php?release_id=300116
• http://www.gentoo.org/security/en/glsa/glsa-200501-46.xml
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:025
• http://seclists.org/lists/fulldisclosure/2005/Jan/0332.html
• http://seclists.org/lists/fulldisclosure/2005/Jan/0537.html
• http://secunia.com/advisories/13900/
• http://sourceforge.net/project/shownotes.php?release_id=300116
• http://www.gentoo.org/security/en/glsa/glsa-200501-46.xml
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:025

Get alerted when CVE-2005-0218 or the next vulnerability affects your stack