CVE-2007-0897

2007-02-1600:00:00

ubuntu.com

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.167 Low

EPSS

Percentile

96.1%

JSON

Clam AntiVirus ClamAV before 0.90 does not close open file descriptors
under certain conditions, which allows remote attackers to cause a denial
of service (file descriptor consumption and failed scans) via CAB archives
with a cabinet header record length of zero, which causes a function to
return without closing a file descriptor.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchclamav< 0.92.1~dfsg2-1.1~dapper2UNKNOWN
ubuntu7.04noarchclamav< 0.90.2-0ubuntu1.3UNKNOWN
ubuntu7.10noarchclamav< 0.91.2-3ubuntu1UNKNOWN
ubuntu8.04noarchclamav< 0.91.2-3ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	clamav	< 0.92.1~dfsg2-1.1~dapper2	UNKNOWN
ubuntu	7.04	noarch	clamav	< 0.90.2-0ubuntu1.3	UNKNOWN
ubuntu	7.10	noarch	clamav	< 0.91.2-3ubuntu1	UNKNOWN
ubuntu	8.04	noarch	clamav	< 0.91.2-3ubuntu1	UNKNOWN