Lucene search

K
osvGoogleOSV:DSA-1281-1
HistoryApr 25, 2007 - 12:00 a.m.

clamav - several vulnerabilities

2007-04-2500:00:00
Google
osv.dev
6

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.158 Low

EPSS

Percentile

95.2%

Several remote vulnerabilities have been discovered in the Clam
anti-virus toolkit. The Common Vulnerabilities and Exposures project
identifies the following problems:

  • CVE-2007-1745
    It was discovered that a file descriptor leak in the CHM handler may
    lead to denial of service.
  • CVE-2007-1997
    It was discovered that a buffer overflow in the CAB handler may lead
    to the execution of arbitrary code.
  • CVE-2007-2029
    It was discovered that a file descriptor leak in the PDF handler may
    lead to denial of service.

For the oldstable distribution (sarge) these problems have been fixed in
version 0.84-2.sarge.16.

For the stable distribution (etch) these problems have been fixed in
version 0.90.1-3etch1.

For the unstable distribution (sid) these problems have been fixed in
version 0.90.2-1.

We recommend that you upgrade your clamav packages. Packages for
the arm, sparc, m68k, mips and mipsel architectures are not yet available.
They will be provided later.

CPENameOperatorVersion
clamaveq0.90.1-2

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.158 Low

EPSS

Percentile

95.2%