CVE-2007-3725
CVE-2007-3725
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
The RAR VM (unrarvm.c) in Clam Antivirus (ClamAV) before 0.91 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted RAR archive, resulting in a NULL pointer dereference.
EPSS 7.7% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://secunia.com/advisories/26231
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35367
- http://kolab.org/security/kolab-vendor-notice-16.txt
- http://www.vupen.com/english/advisories/2007/2509
- http://secunia.com/advisories/26164
- http://www.debian.org/security/2007/dsa-1340
- http://secunia.com/advisories/26226
- http://secunia.com/advisories/26038
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064569.html
- http://www.vupen.com/english/advisories/2008/0924/references
- http://security.gentoo.org/glsa/glsa-200708-04.xml
- http://osvdb.org/36907
- https://wwws.clamav.net/bugzilla/show_bug.cgi?id=555
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:150
- http://secunia.com/advisories/29420
- http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
- http://www.trustix.org/errata/2007/0023/
- http://www.metaeye.org/advisories/54
- http://secunia.com/advisories/26209
- http://www.securityfocus.com/archive/1/473371/100/0/threaded
- http://docs.info.apple.com/article.html?artnum=307562
- http://secunia.com/advisories/26377
- http://www.vupen.com/english/advisories/2007/2643
- https://nvd.nist.gov/vuln/detail/CVE-2007-3725