CVE-2007-6335
CVE-2007-6335
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow.
EPSS 18.4% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
clamav Debian:12
- Affected ranges
- ECOSYSTEM: < 0.92~dfsg-1~volatile2
Update to 0.92~dfsg-1~volatile2
clamav Debian:13
- Affected ranges
- ECOSYSTEM: < 0.92~dfsg-1~volatile2
Update to 0.92~dfsg-1~volatile2
clamav Debian:14
- Affected ranges
- ECOSYSTEM: < 0.92~dfsg-1~volatile2
Update to 0.92~dfsg-1~volatile2
Original sources
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=634
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:003
- http://www.securityfocus.com/bid/26927
- http://www.debian.org/security/2007/dsa-1435
- http://secunia.com/advisories/28412
- http://www.vupen.com/english/advisories/2008/0924/references
- https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00644.html
- http://www.securitytracker.com/id?1019112
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39119
- http://secunia.com/advisories/28421
- http://secunia.com/advisories/29420
- http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
- https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00740.html
- http://secunia.com/advisories/28176
- http://secunia.com/advisories/28587
- http://secunia.com/advisories/28153
- http://docs.info.apple.com/article.html?artnum=307562
- http://security.gentoo.org/glsa/glsa-200712-20.xml
- https://www.exploit-db.com/exploits/4862
- http://secunia.com/advisories/28117
- http://www.vupen.com/english/advisories/2007/4253
- http://secunia.com/advisories/28278
- http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
- https://nvd.nist.gov/vuln/detail/CVE-2007-6335