How severe is CVE-2005-3221?

CVE-2005-3221 has a CVSS 2.0 base score of 5.1, rated medium severity.

Is CVE-2005-3221 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (75th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2005-3221?

CVE-2005-3221 affects Fortinet Fortinet Antivirus. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2005-3221?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2005-3221 published?

CVE-2005-3221 was published on 2005-10-14 and last updated on 2026-06-16.

CVE-2005-3221

CVE-2005-3221 is a medium-severity vulnerability in Fortinet Fortinet Antivirus with a CVSS 2.0 base score of 5.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 5.1)
EPSS exploit prediction: 2% (75th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Fortinet Fortinet Antivirus
Published: 2005-10-14
Last modified: 2026-06-16

Description

Multiple interpretation error in unspecified versions of Fortinet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.

Frequently asked questions

What is CVE-2005-3221?: Multiple interpretation error in unspecified versions of Fortinet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, even though they are rejected as corrupted by Winzip and BitZipper.
How severe is CVE-2005-3221?: CVE-2005-3221 has a CVSS 2.0 base score of 5.1, rated medium severity.
Is CVE-2005-3221 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (75th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2005-3221?: CVE-2005-3221 affects Fortinet Fortinet Antivirus. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2005-3221?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2005-3221 published?: CVE-2005-3221 was published on 2005-10-14 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:h:fortinet:fortinet_antivirus:*:*:*:*:*:*:*:*

More vulnerabilities in Fortinet Fortinet Antivirus

CVE-2012-1462 — Medium (CVSS 4.3): The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat…
CVE-2012-1461 — Medium (CVSS 4.3): The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware…
CVE-2012-1459 — Medium (CVSS 4.3): The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7,…
CVE-2012-1456 — Medium (CVSS 4.3): The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424,…
CVE-2012-1454 — Medium (CVSS 4.3): The ELF file parser in Dr.Web 5.0.2.03300, eSafe 7.0.17.0, McAfee Gateway (formerly Webwasher) 2010.1C, Rising…
CVE-2012-1453 — Medium (CVSS 4.3): The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky Anti-Virus 7.0.0.125, Sophos…

All CVEs affecting Fortinet Fortinet Antivirus →