CVE-2013-7087
published 2019-11-15CVE-2013-7087: ClamAV before 0.97.7 has WWPack corrupt heap memory
PriorityP342critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
2.95%
85.6th percentile
ClamAV before 0.97.7 has WWPack corrupt heap memory
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| clamav | clamav | < 0.97.7 | 0.97.7 |
| clamav | clamav | >= 0 < 0.97.7+dfsg-1 | 0.97.7+dfsg-1 |
| clamav | clamav | >= 0 < 0.97.7+dfsg-1 | 0.97.7+dfsg-1 |
| clamav | clamav | >= 0 < 0.97.7+dfsg-1 | 0.97.7+dfsg-1 |
| clamav | clamav | >= 0 < 0.97.7+dfsg-1 | 0.97.7+dfsg-1 |
| debian | clamav | < clamav 0.97.7+dfsg-1 (bookworm) | clamav 0.97.7+dfsg-1 (bookworm) |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv9.8CRITICAL
vendor_debian9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2013-7087: clamav - ClamAV before 0.97.7 has WWPack corrupt heap memory
vendor_debian·2013·CVSS 9.8
CVE-2013-7087 [CRITICAL] CVE-2013-7087: clamav - ClamAV before 0.97.7 has WWPack corrupt heap memory
ClamAV before 0.97.7 has WWPack corrupt heap memory
Scope: local
bookworm: resolved (fixed in 0.97.7+dfsg-1)
bullseye: resolved (fixed in 0.97.7+dfsg-1)
forky: resolved (fixed in 0.97.7+dfsg-1)
sid: resolved (fixed in 0.97.7+dfsg-1)
trixie: resolved (fixed in 0.97.7+dfsg-1)
GHSA
GHSA-39x3-26gc-r96h: ClamAV before 0
ghsa_unreviewed·2022-05-05
CVE-2013-7087 [HIGH] GHSA-39x3-26gc-r96h: ClamAV before 0
ClamAV before 0.97.7 has WWPack corrupt heap memory
OSV
CVE-2013-7087: ClamAV before 0
osv·2019-11-15·CVSS 9.8
CVE-2013-7087 [CRITICAL] CVE-2013-7087: ClamAV before 0
ClamAV before 0.97.7 has WWPack corrupt heap memory
No detection rules found.
No public exploits indexed.
http://security.gentoo.org/glsa/glsa-201405-08.xmlhttp://www.openwall.com/lists/oss-security/2013/12/13/1http://www.securityfocus.com/bid/58546https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7087https://security-tracker.debian.org/tracker/CVE-2013-7087http://security.gentoo.org/glsa/glsa-201405-08.xmlhttp://www.openwall.com/lists/oss-security/2013/12/13/1http://www.securityfocus.com/bid/58546https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7087https://security-tracker.debian.org/tracker/CVE-2013-7087
2019-11-15
Published