CVE-2007-3725

ClamAV / UnRAR - .RAR Handling Remote Null Pointer Dereference

Severity Score

5.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The RAR VM (unrarvm.c) in Clam Antivirus (ClamAV) before 0.91 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted RAR archive, resulting in a NULL pointer dereference.

El módulo RAR VM (unrarvm.c) de Clam Antivirus (ClamAV) anterior a 0.91 permite a atacantes remotos con la intervención del usuario provocar una denegación de servicio (caída) mediante un archivo RAR manipulado, resultando en una referencia a punero nulo (NULL).

*Credits: N/A

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-07-11 CVE Reserved
2007-07-11 First Exploit
2007-07-12 CVE Published
2024-08-07 CVE Updated
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (25)

URL	Tag	Source
http://docs.info.apple.com/article.html?artnum=307562	X_refsource_confirm
http://kolab.org/security/kolab-vendor-notice-16.txt	X_refsource_confirm
http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064569.html	Mailing List
http://osvdb.org/36907	Vdb Entry
http://secunia.com/advisories/26038	Third Party Advisory
http://secunia.com/advisories/26164	Third Party Advisory
http://secunia.com/advisories/26209	Third Party Advisory
http://secunia.com/advisories/26226	Third Party Advisory
http://secunia.com/advisories/26231	Third Party Advisory
http://secunia.com/advisories/26377	Third Party Advisory
http://secunia.com/advisories/29420	Third Party Advisory
http://www.securityfocus.com/archive/1/473371/100/0/threaded	Mailing List
http://www.vupen.com/english/advisories/2007/2509	Vdb Entry
http://www.vupen.com/english/advisories/2007/2643	Vdb Entry
http://www.vupen.com/english/advisories/2008/0924/references	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/35367	Vdb Entry
https://wwws.clamav.net/bugzilla/show_bug.cgi?id=555	X_refsource_confirm

URL	Date	SRC
https://www.exploit-db.com/exploits/30291	2007-07-11
http://www.metaeye.org/advisories/54	2024-08-07

URL	Date	SRC

URL	Date	SRC
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html	2018-10-15
http://security.gentoo.org/glsa/glsa-200708-04.xml	2018-10-15
http://www.debian.org/security/2007/dsa-1340	2018-10-15
http://www.mandriva.com/security/advisories?name=MDKSA-2007:150	2018-10-15
http://www.novell.com/linux/security/advisories/2007_15_sr.html	2018-10-15
http://www.trustix.org/errata/2007/0023	2018-10-15

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.15 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.15"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.20 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.20"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.21 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.21"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.22 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.22"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.23 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.23"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.24 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.24"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.51 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.51"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.52 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.52"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.53 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.53"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.54 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.54"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.60 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.60"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.60p Search vendor "Clam Anti-virus" for product "Clamav" and version "0.60p"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.65 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.65"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.67 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.67"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.68 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.68"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.68.1 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.68.1"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.70 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.70"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.71 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.71"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.72 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.72"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.73 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.73"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.74 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.74"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.75 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.75"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.75.1 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.75.1"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.80 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.80"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.80_rc1 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.80_rc1"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.80_rc2 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.80_rc2"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.80_rc3 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.80_rc3"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.80_rc4 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.80_rc4"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.81 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.81"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.81_rc1 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.81_rc1"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.82 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.82"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.83 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.83"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.84 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.84"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.84_rc1 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.84_rc1"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.84_rc2 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.84_rc2"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.85 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.85"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.85.1 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.85.1"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.86 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.86"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.86.1 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.86.1"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.86.2 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.86.2"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.86_rc1 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.86_rc1"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.87 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.87"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.87.1 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.87.1"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.88 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.88"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.88.1 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.88.1"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.88.3 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.88.3"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.88.4 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.88.4"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.88.5 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.88.5"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.88.6 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.88.6"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.88.7 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.88.7"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.90 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.90"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.90_rc1.1 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.90_rc1.1"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.90_rc2 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.90_rc2"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.90_rc3 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.90_rc3"		-		Affected