CVE-2007-6029

Severity Score

7.5

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute arbitrary code via a crafted e-mail message. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.

Vulnerabilidad no especificada en ClamAV 0.91.1 y 0.91.2 permite a atacantes remotos ejecutar código de su elección mediante un mensaje de correo electrónico manipulado.
NOTA: Esta información se basa en una vaga descripción de una organización de venta de información de vulnerabilidades que no se coordina con los fabricantes o con los comunicados de correcciones de versiones. Se le asigna un CVE por cuestiones de seguimiento, pero es complicado determinar duplicidad con otros CVEs.

*Credits: N/A

CVSS Scores

NISTv2 7.5

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-11-19 CVE Reserved
2007-11-20 CVE Published
2024-09-16 CVE Updated
2024-09-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-94: Improper Control of Generation of Code ('Code Injection')

CAPEC

References (3)

URL	Tag	Source
http://wabisabilabi.blogspot.com/2007/11/focus-on-clamav-remote-code-execution.html	X_refsource_misc
http://wslabi.com/wabisabilabi/showBidInfo.do?code=ZD-00000069	X_refsource_misc
http://www.securityfocus.com/bid/26463	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.91.1 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.91.1"		-		Affected
Clam Anti-virus Search vendor "Clam Anti-virus"		Clamav Search vendor "Clam Anti-virus" for product "Clamav"				0.91.2 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.91.2"		-		Affected