CVSS: 9.1EPSS: 39%CPEs: 1EXPL: 1CVE-2007-6335 – ClamAV 0.91.2 - libclamav MEW PE Buffer Overflow
https://notcve.org/view.php?id=CVE-2007-6335
20 Dec 2007 — Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow. Desbordamiento de buffer en libclamav en ClamAV , en versiones anteriores a la 0.92. Permite que atacantes remotos ejecuten código a su elección, a través de un fichero PE empaquetado con MEW, lo que provoca un desboramiento de buffer en el heap(pila de datos dinámicos). • https://www.exploit-db.com/exploits/4862 • CWE-189: Numeric Errors •
CVSS: 9.1EPSS: 8%CPEs: 1EXPL: 0CVE-2007-6336
https://notcve.org/view.php?id=CVE-2007-6336
20 Dec 2007 — Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file. Un error por un paso en ClamAV versiones anteriores a 0.92, permite a los atacantes remotos ejecutar código arbitrario por medio de un archivo CAB comprimido especialmente diseñado de MS-ZIP. • http://docs.info.apple.com/article.html?artnum=307562 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-189: Numeric Errors •
CVSS: 9.8EPSS: 91%CPEs: 1EXPL: 4CVE-2007-4560 – ClamAV Milter - Blackhole-Mode Remote Code Execution
https://notcve.org/view.php?id=CVE-2007-4560
28 Aug 2007 — clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail." clamav-milter en ClamAV anterior a 0.91.2, cuando funciona en modo agujero negro (black hole), permite a atacantes remotos ejecutar comandos de su elección a través de metacaractéres del intérprete de comandos que es utilizado en ciertas llamadas popen, afectando a "el campo recip... • https://www.exploit-db.com/exploits/16924 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 5.5EPSS: 2%CPEs: 8EXPL: 0CVE-2007-4510
https://notcve.org/view.php?id=CVE-2007-4510
23 Aug 2007 — ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service (application crash) via (1) a crafted RTF file, which triggers a NULL dereference in the cli_scanrtf function in libclamav/rtf.c; or (2) a crafted HTML document with a data: URI, which triggers a NULL dereference in the cli_html_normalise function in libclamav/htmlnorm.c. NOTE: some of these details are obtained from third party information. ClamAV anterior a 0.91.2, us... • http://docs.info.apple.com/article.html?artnum=307562 •
CVSS: 5.5EPSS: 3%CPEs: 3EXPL: 0CVE-2007-2650
https://notcve.org/view.php?id=CVE-2007-2650
14 May 2007 — The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) via an OLE2 file with (1) a large property size or (2) a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file. El analazidor sintáctico OLE2 en Clam AntiVirus (ClamAV) permite a atacantes remotos provocar denegación de servicio (consumo de recursos) a través de un archivo OLE2 con (1)un tamaño grande de la propiedad o (2) un bucle en la cad... • http://article.gmane.org/gmane.comp.security.virus.clamav.devel/2853 • CWE-400: Uncontrolled Resource Consumption •
CVSS: 7.1EPSS: 1%CPEs: 2EXPL: 0CVE-2007-1745
https://notcve.org/view.php?id=CVE-2007-1745
16 Apr 2007 — The chm_decompress_stream function in libclamav/chmunpack.c in Clam AntiVirus (ClamAV) before 0.90.2 leaks file descriptors, which has unknown impact and attack vectors involving a crafted CHM file, a different vulnerability than CVE-2007-0897. NOTE: some of these details are obtained from third party information. La función chm_decompress_stream en libclamav/chmunpack.c de Clam AntiVirus (ClamAV) anterior a 0.90.2 filtra descriptores de fichero, lo cual tiene impacto y vectores de ataque desconocidos relac... • http://docs.info.apple.com/article.html?artnum=307562 •
CVSS: 7.5EPSS: 5%CPEs: 3EXPL: 0CVE-2007-0897
https://notcve.org/view.php?id=CVE-2007-0897
16 Feb 2007 — Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consumption and failed scans) via CAB archives with a cabinet header record length of zero, which causes a function to return without closing a file descriptor. Clam AntiVirus ClamAV anterior a 0.90 no cierra los descriptores de apertura de ficheros bajo ciertas condiciones, lo cual permite a atacantes remotos provocar denegación de serv... • http://docs.info.apple.com/article.html?artnum=307562 • CWE-772: Missing Release of Resource after Effective Lifetime •
CVSS: 7.5EPSS: 1%CPEs: 48EXPL: 0CVE-2007-0898
https://notcve.org/view.php?id=CVE-2007-0898
16 Feb 2007 — Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the id MIME header parameter in a multi-part message. Vulnerabilidad de salto de directorio en clamd en Clam AntiVirus ClamAV anterior a 0.90 permite a atacantes remotos sobreescribir ficheros de su elección a través de la secuencia .. (punto punto) en el parámetro de cabecera id MIME en un mensaje multi-parte. • http://docs.info.apple.com/article.html?artnum=307562 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.5EPSS: 1%CPEs: 22EXPL: 0CVE-2006-5874
https://notcve.org/view.php?id=CVE-2006-5874
10 Dec 2006 — Clam AntiVirus (ClamAV) 0.88 and earlier allows remote attackers to cause a denial of service (crash) via a malformed base64-encoded MIME attachment that triggers a null pointer dereference. Clam AntiVirus (ClamAV) 0.88 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio (caída) mediante un adjunto MIME codificado-base64 mal formado que dispara una referencia a puntero null. • http://secunia.com/advisories/23327 •
CVSS: 5.5EPSS: 20%CPEs: 48EXPL: 1CVE-2006-5295 – Clam AntiVirus 0.88.4 - CHM Chunk Name Length Denial of Service (PoC)
https://notcve.org/view.php?id=CVE-2006-5295
16 Oct 2006 — Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service (scanning service crash) via a crafted Compressed HTML Help (CHM) file that causes ClamAV to "read an invalid memory location." Vulnerabilidad no especificada en ClamAV anterior a 0.88.5 permite a atacantes remotos provocar una denegación de servicio (caída del servicio de escaneo) mediante un archivo de Ayuda HTML comprimida (CHM) creado artesanalmente que hace que ClamAV lea una posición de memoria invál... • https://www.exploit-db.com/exploits/2586 •