PT-2007-3968 · Clam Antivirus · Clamav

Publicado 2007-05-14 · Atualizado 2020-11-09 · CVE-2007-2650

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Clam AntiVirus (ClamAV) (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service due to resource consumption. This can be achieved through an OLE2 file with either a large property size or a loop in the FAT file block chain, which triggers an infinite loop. An example of such an attack is demonstrated via a crafted DOC file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2007-2650

DSA-1320-1

DTSA-43-1

Produtos afetados

Clamav

Referências · 22

• http://secunia.com/advisories/25525 · Nota
• https://security-tracker.debian.org/tracker/CVE-2007-2650 · Aviso do Fabricante
• http://secunia.com/advisories/25688 · Nota
• http://lurker.clamav.net/message/20070418.111144.0df6c5d3.en.html · Nota
• http://secunia.com/advisories/25523 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-2650 · Aviso do Fabricante
• http://debian.org/security/2007/dsa-1320 · Aviso do Fabricante
• http://secunia.com/advisories/25244 · Correção
• http://secunia.com/advisories/25796 · Nota
• http://securityfocus.com/bid/24316 · Nota
• http://article.gmane.org/gmane.comp.security.virus.clamav.devel/2853 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2650 · Nota de Segurança
• http://secunia.com/advisories/25558 · Nota
• http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog · Nota
• http://kolab.org/security/kolab-vendor-notice-15.txt · Nota