Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2007-3725 — Anti-virus Clamav vulnerability

6 documents6 sources
Severity
4.3MEDIUMNVD
EPSS
19.5%
top 4.60%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
ClamavClam Anti-virus Clamav
Timeline
PublishedJul 12
Latest updateMay 1

Description

The RAR VM (unrarvm.c) in Clam Antivirus (ClamAV) before 0.91 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted RAR archive, resulting in a NULL pointer dereference.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

▶Debianclamav/clamav< 0.91-1+3
▶NVDclam_anti-virus/clamav54 versions+53

Patches

Patch: www.metaeye.org ↗Patch: www.metaeye.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-hjxc-gvpm-wh37: The RAR VM (unrarvm↗2022-05-01
▶
CVEList
CVE-2007-3725: The RAR VM (unrarvm↗2007-07-12
▶
OSV
CVE-2007-3725: The RAR VM (unrarvm↗2007-07-12
▶

💥Exploits & PoCs

1
Exploit-DB
ClamAV / UnRAR - .RAR Handling Remote Null Pointer Dereference↗2007-07-11
▶

📋Vendor Advisories

1
Debian
CVE-2007-3725: clamav - The RAR VM (unrarvm.c) in Clam Antivirus (ClamAV) before 0.91 allows user-assist...↗2007
▶
CVE-2007-3725 — Clam Anti-virus Clamav vulnerability | cvebase