PT-2007-4318 · Cisco · Clamav

Published 2007-06-07 · Updated 2008-09-05 · CVE-2007-3025

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: ClamAV versions prior to 0.90.3 ClamAV version 0.91 before 0.91rc1

Description: The issue is related to an unspecified vulnerability in the phishcheck.c file of the libclamav component. It affects systems running on Solaris and can be exploited by remote attackers to cause a denial of service, resulting in the system hanging. The vulnerability is connected to the isURL function and regular expressions.

Recommendations: For ClamAV versions prior to 0.90.3, update to version 0.90.3 or later. For ClamAV version 0.91 before 0.91rc1, update to version 0.91rc1 or later.

Fix

Related Identifiers

CVE-2007-3025

Affected Products

Clamav

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-3025 · Security Note
• http://kolab.org/security/kolab-vendor-notice-15.txt · Vendor Advisory
• http://lurker.clamav.net/message/20070530.224918.5c64abc4.en.html · Patch
• http://secunia.com/advisories/25525 · Note