PT-2007-7204 · Cisco · Clamav

Published 2007-12-31 · Updated 2024-06-15 · CVE-2007-6337

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ClamAV versions prior to 0.92

Description The issue concerns an unspecified vulnerability in the bzip2 decompression algorithm. It has unknown impact and remote attack vectors.

Recommendations For versions prior to 0.92, update to version 0.92 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-6337

DTSA-101-1

OPENSUSE-SU-2024:10685-1

Affected Products

Clamav

References · 77

• http://securityfocus.com/bid/27063 · Patch
• http://security.gentoo.org/glsa/glsa-200712-20.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-6337 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2008:003 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-6337 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-6337 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-6337 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10685-1 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-January/msg00644.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-January/msg00740.html · Vendor Advisory
• https://suse.com/security/cve/CVE-2017-12374 · Note
• https://suse.com/security/cve/CVE-2007-0897 · Note
• https://suse.com/security/cve/CVE-2017-6419 · Note