Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2007-0897
HistoryFeb 16, 2007 - 7:28 p.m.

CVE-2007-0897

2007-02-1619:28:00
CWE-772
[email protected]
web.nvd.nist.gov
37
clamav
cve-2007-0897
denial of service
file descriptor
security vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.167 Low

EPSS

Percentile

96.1%

JSON

Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consumption and failed scans) via CAB archives with a cabinet header record length of zero, which causes a function to return without closing a file descriptor.

Affected configurations

NVD
Node
clamavclamavRange<0.90
Node
applemac_os_x_serverRange<10.4.11
Node
debiandebian_linuxMatch3.1
CPENameOperatorVersion
clamav:clamavclamavlt0.90

References

Related

cvelist 2
nvd 2
securityvulns 2
prion 2
debiancve 2
ubuntucve 1
nessus 6
gentoo 1
osv 1
cve 1
debian 1
openvas 9
suse 1
cvelist
cvelist
CVE-2007-0897
2007-02-16 19:00:00
CVE-2007-1745
2007-04-16 21:00:00
nvd
nvd
CVE-2007-0897
2007-02-16 19:28:00
CVE-2007-1745
2007-04-16 21:19:00
securityvulns
securityvulns
iDefense Security Advisory 02.15.07: Multiple Vendor ClamAV CAB File Denial of Service Vulnerability
2007-02-15 00:00:00
ClamAV antivirus directory traversal
2007-02-15 00:00:00
prion
prion
Open redirect
2007-02-16 19:28:00
Design/Logic Flaw
2007-04-16 21:19:00
debiancve
debiancve
CVE-2007-0897
2007-02-16 19:28:00
CVE-2007-1745
2007-04-16 21:19:00
ubuntucve
ubuntucve
CVE-2007-0897
2007-02-16 00:00:00
nessus
nessus
Mandrake Linux Security Advisory : clamav (MDKSA-2007:043)
2007-02-21 00:00:00
SuSE 10 Security Update : clamav (ZYPP Patch Number 2631)
2007-12-13 00:00:00
openSUSE 10 Security Update : clamav (clamav-2632)
2007-10-17 00:00:00
gentoo
gentoo
ClamAV: Denial of service
2007-03-02 00:00:00
osv
osv
clamav
2007-03-06 00:00:00
cve
cve
CVE-2007-1745
2007-04-16 21:19:00
debian
debian
[SECURITY] [DSA 1263-1] New clamav packages fix denial of service
2007-03-06 22:33:56
openvas
openvas
Debian Security Advisory DSA 1263-1 (clamav)
2008-01-17 00:00:00
SLES9: Security update for clamav
2009-10-10 00:00:00
Mandriva Update for clamav MDKSA-2007:043 (clamav)
2009-04-09 00:00:00
suse
suse
remote denial of service in clamav
2007-02-23 17:25:10

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.167 Low

EPSS

Percentile

96.1%

JSON
Related for CVE-2007-0897
cvelist2nvd2securityvulns2prion2debiancve2ubuntucve1nessus6gentoo1osv1cve1debian1openvas9suse1