CVE-2007-6335
NoneCVSS
—
EPSS
18.4%
Published
Dec 20, 2007
CISA due date
—
The record
Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | clamav | 0 | 0.92~dfsg-1~volatile2 |
| Debian:12 | clamav | 0 | 0.92~dfsg-1~volatile2 |
| Debian:13 | clamav | 0 | 0.92~dfsg-1~volatile2 |
| Debian:4.0 | clamav | 0 | 0.90.1-3etch8 |
| Debian:5.0 | clamav | 0 | 0.91.2-4.0lenny1 |
| openSUSE:Tumbleweed | clamav | 0 | 0.103.3-1.4 |
Related vulnerabilities
- HSEC-2024-0002 out-of-bounds write when there are many bzip2 selectors Also affects clamav
- CVE-2025-20128 A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV… Also affects clamav
- CVE-2024-20506 A vulnerability in the ClamD service module of Clam AntiVirus (ClamAV) versions 1.4.0… Also affects clamav
- CVE-2024-20505 A vulnerability in the PDF parsing module of Clam AntiVirus (ClamAV) versions 1.4.0… Also affects clamav
- CVE-2023-20197 A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+)… Also affects clamav
- CVE-2023-20052 On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was… Also affects clamav
- CVE-2023-20032 On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was… Also affects clamav
- CVE-2017-6418 libclamav/message.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service… Also affects clamav