Vulnerability Details : CVE-2007-6335
Public exploit exists!
Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow.
Vulnerability category: OverflowExecute code
Products affected by CVE-2007-6335
- cpe:2.3:a:clam_anti-virus:clamav:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2007-6335
30.65%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 97 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2007-6335
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
CWE ids for CVE-2007-6335
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2007-6335
-
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00740.html
[SECURITY] Fedora 8 Update: clamav-0.92-6.fc8
-
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
-
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
[security-announce] SUSE Security Summary Report SUSE-SR:2008:001 - openSUSE Security Announce - openSUSE Mailing Lists
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/39119
ClamAV libclamav MEW PE buffer overflow CVE-2007-6335 Vulnerability Report
-
http://security.gentoo.org/glsa/glsa-200712-20.xml
ClamAV: Multiple vulnerabilities (GLSA 200712-20) — Gentoo security
-
http://www.vupen.com/english/advisories/2007/4253
Site en construction
-
http://www.securityfocus.com/bid/26927
-
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=634
-
http://docs.info.apple.com/article.html?artnum=307562
-
https://www.exploit-db.com/exploits/4862
ClamAV 0.91.2 - libclamav MEW PE Buffer Overflow - Linux remote Exploit
-
http://www.securitytracker.com/id?1019112
GoDaddy Domain Name Search
-
http://www.mandriva.com/security/advisories?name=MDVSA-2008:003
Mandriva
-
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00644.html
[SECURITY] Fedora 7 Update: clamav-0.92-6.fc7
-
http://www.debian.org/security/2007/dsa-1435
[SECURITY] [DSA 1435-1] New clamav packages fix several vulnerabilities
-
http://www.vupen.com/english/advisories/2008/0924/references
Webmail: access your OVH emails on ovhcloud.com | OVHcloud
Jump to