CVE-2007-1997 — Numeric Range Comparison Without Minimum Check in Anti-virus Clamav

8 documents7 sources

Severity

7.5HIGHNVD

EPSS

11.9%

top 6.25%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Clamav Clam Anti-virus Clamav

Timeline

PublishedApr 16

Latest updateMay 1

Description

Integer signedness error in the (1) cab_unstore and (2) cab_extract functions in libclamav/cab.c in Clam AntiVirus (ClamAV) before 0.90.2 allow remote attackers to execute arbitrary code via a crafted CHM file that contains a negative integer, which passes a signed comparison and leads to a stack-based buffer overflow.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶Debianclamav/clamav< 0.90.2-1+3

▶NVDclam_anti-virus/clamav6 versions+5

Patches

Patch: secunia.com ↗Patch: sourceforge.net ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

GHSA

GHSA-p592-g5c7-x7w6: Integer signedness error in the (1) cab_unstore and (2) cab_extract functions in libclamav/cab↗2022-05-01

▶

OSV

CVE-2007-1997: Integer signedness error in the (1) cab_unstore and (2) cab_extract functions in libclamav/cab↗2007-04-16

▶

CVEList

CVE-2007-1997: Integer signedness error in the (1) cab_unstore and (2) cab_extract functions in libclamav/cab↗2007-04-16

▶

💥Exploits & PoCs

Exploit-DB

PHP 5.2.5 - Multiple GetText functions Denial of Service Vulnerabilities↗2007-11-13

▶

Exploit-DB

VCDGear 3.56 Build 050213 - 'FILE' Local Code Execution↗2007-04-13

▶

📋Vendor Advisories

Debian

CVE-2007-1997: clamav - Integer signedness error in the (1) cab_unstore and (2) cab_extract functions in...↗2007

▶

💬Community

Bugzilla

CVE-2007-1745: clamav < 0.90.2 chm unpack issue↗2007-04-18

▶