CVE-2007-6745
published 2019-11-07CVE-2007-6745: clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.
PriorityP344critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
2.23%
80.8th percentile
clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| clamav | clamav | — | — |
| clamav | clamav | >= 0 < 0.91.2-1~volatile1 | 0.91.2-1~volatile1 |
| clamav | clamav | >= 0 < 0.91.2-1~volatile1 | 0.91.2-1~volatile1 |
| clamav | clamav | >= 0 < 0.91.2-1~volatile1 | 0.91.2-1~volatile1 |
| clamav | clamav | >= 0 < 0.91.2-1~volatile1 | 0.91.2-1~volatile1 |
| debian | clamav | < clamav 0.91.2-1~volatile1 (bookworm) | clamav 0.91.2-1~volatile1 (bookworm) |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv9.8CRITICAL
vendor_debian9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-x9fv-8cwx-6m58: clamav 0
ghsa_unreviewed·2022-04-22
CVE-2007-6745 [HIGH] GHSA-x9fv-8cwx-6m58: clamav 0
clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.
OSV
CVE-2007-6745: clamav 0
osv·2019-11-07·CVSS 9.8
CVE-2007-6745 [CRITICAL] CVE-2007-6745: clamav 0
clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.
Debian
CVE-2007-6745: clamav - clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.
vendor_debian·2007·CVSS 9.8
CVE-2007-6745 [CRITICAL] CVE-2007-6745: clamav - clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.
clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.
Scope: local
bookworm: resolved (fixed in 0.91.2-1~volatile1)
bullseye: resolved (fixed in 0.91.2-1~volatile1)
forky: resolved (fixed in 0.91.2-1~volatile1)
sid: resolved (fixed in 0.91.2-1~volatile1)
trixie: resolved (fixed in 0.91.2-1~volatile1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.openwall.com/lists/oss-security/2012/03/29/2https://access.redhat.com/security/cve/cve-2007-6745https://security-tracker.debian.org/tracker/CVE-2007-6745http://www.openwall.com/lists/oss-security/2012/03/29/2https://access.redhat.com/security/cve/cve-2007-6745https://security-tracker.debian.org/tracker/CVE-2007-6745
2019-11-07
Published