CVE-2007-0897
Severity Score
7.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consumption and failed scans) via CAB archives with a cabinet header record length of zero, which causes a function to return without closing a file descriptor.
Clam AntiVirus ClamAV anterior a 0.90 no cierra los descriptores de apertura de ficheros bajo ciertas condiciones, lo cual permite a atacantes remotos provocar denegación de servicio (consumo del descriptor de fichero y fallo de escaneo) a través de archivos CAB
con una longitud de registro con una cabecera cabinet(.CAB) de cero, lo cual provoca que una función retorne sin cerrar el descriptor de fichero.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2007-02-13 CVE Reserved
- 2007-02-16 CVE Published
- 2024-07-11 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-772: Missing Release of Resource after Effective Lifetime
CAPEC
References (20)
| URL | Tag | Source |
|---|---|---|
| http://docs.info.apple.com/article.html?artnum=307562 | Broken Link | |
| http://osvdb.org/32283 | Broken Link | |
| http://secunia.com/advisories/29420 | Broken Link | |
| http://www.securitytracker.com/id?1017659 | Broken Link | |
| http://www.vupen.com/english/advisories/2007/0623 | Broken Link | |
| http://www.vupen.com/english/advisories/2008/0924/references | Broken Link | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/32531 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/24187 | 2024-02-09 | |
| http://www.securityfocus.com/bid/22580 | 2024-02-09 |
| URL | Date | SRC |
|---|---|---|
| http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=475 | 2024-02-09 | |
| http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html | 2024-02-09 | |
| http://lists.suse.com/archive/suse-security-announce/2007-Feb/0004.html | 2024-02-09 | |
| http://secunia.com/advisories/24183 | 2024-02-09 | |
| http://secunia.com/advisories/24192 | 2024-02-09 | |
| http://secunia.com/advisories/24319 | 2024-02-09 | |
| http://secunia.com/advisories/24332 | 2024-02-09 | |
| http://secunia.com/advisories/24425 | 2024-02-09 | |
| http://security.gentoo.org/glsa/glsa-200703-03.xml | 2024-02-09 | |
| http://www.debian.org/security/2007/dsa-1263 | 2024-02-09 | |
| http://www.mandriva.com/security/advisories?name=MDKSA-2007:043 | 2024-02-09 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Clamav Search vendor "Clamav" | Clamav Search vendor "Clamav" for product "Clamav" | < 0.90 Search vendor "Clamav" for product "Clamav" and version " < 0.90" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Mac Os X Server Search vendor "Apple" for product "Mac Os X Server" | < 10.4.11 Search vendor "Apple" for product "Mac Os X Server" and version " < 10.4.11" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 3.1 Search vendor "Debian" for product "Debian Linux" and version "3.1" | - |
Affected
| ||||||