PT-2007-3968 · Clam Antivirus · Clamav

Published 2007-05-14 · Updated 2020-11-09 · CVE-2007-2650

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Clam AntiVirus (ClamAV) (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service due to resource consumption. This can be achieved through an OLE2 file with either a large property size or a loop in the FAT file block chain, which triggers an infinite loop. An example of such an attack is demonstrated via a crafted DOC file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2007-2650

DSA-1320-1

DTSA-43-1

Affected Products

Clamav

References · 22

• https://security-tracker.debian.org/tracker/CVE-2007-2650 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-2650 · Vendor Advisory
• http://debian.org/security/2007/dsa-1320 · Vendor Advisory
• http://secunia.com/advisories/25244 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-2650 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2007:115 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-2650 · Vendor Advisory
• http://trustix.org/errata/2007/0020 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200706-05.xml · Vendor Advisory
• http://novell.com/linux/security/advisories/2007_33_clamav.html · Vendor Advisory
• http://secunia.com/advisories/25525 · Note
• http://secunia.com/advisories/25688 · Note
• http://lurker.clamav.net/message/20070418.111144.0df6c5d3.en.html · Note
• http://secunia.com/advisories/25523 · Note
• http://secunia.com/advisories/25796 · Note