Vulnerability Report

CVE-2005-3664

Title: Heap-based buffer overflow in Kaspersky Anti-Virus Engine via CHM

Memory Corruption

Proof Of Concept

No public PoC currently indexed for CVE-2005-3664.

CWE Category NVD-CWE-noinfo
Published Date Nov 18, 2005
Modified Date Jun 16, 2026
Exploit Status Not Found
Score 7.5 CVSS v2.0
Exploit Probability (EPSS)
4.32%

Vulnerability Summary

CVE-2005-3664: Heap-based buffer overflow in Kaspersky Anti-Virus Engine, as used in Kaspersky Personal 5.0.227, Anti-Virus On-Demand Scanner for Linux 5.0.5, and F-Secure Anti-Virus for Linux 4.50 allows remote attackers to execute arbitrary code via a crafted CHM file.

Impacted Vendors

K
kaspersky 1
K
kaspersky_lab 2
F
f-secure 1

Reference Links

http://secunia.com/advisories/17130 http://secunia.com/advisories/17144 http://www.idefense.com/application/poi/display?id=318&type=vulnerabilities http://www.osvdb.org/19912 http://www.osvdb.org/19913 http://www.securityfocus.com/bid/15054 https://exchange.xforce.ibmcloud.com/vulnerabilities/22564 http://secunia.com/advisories/17130 http://secunia.com/advisories/17144 http://www.idefense.com/application/poi/display?id=318&type=vulnerabilities http://www.osvdb.org/19912 http://www.osvdb.org/19913 http://www.securityfocus.com/bid/15054 https://exchange.xforce.ibmcloud.com/vulnerabilities/22564
CVSS v2.0
Source Entity [email protected]
Severity HIGH
7.5
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:N/AC:L/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2005-3664 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A
Complexity N/A
Privileges N/A
Interaction NONE
CVSS Vector String AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.