CVE

Id
29692  
CVE No.
CVE-2007-6335  
Status
Candidate  
Description
Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow.  
Phase
Assigned (20071213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
313046 29692 CVE-2007-6335 IDEFENSE:20071218 ClamAV libclamav MEW PE File Integer Overflow Vulnerability  View
313047 29692 CVE-2007-6335 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=634  View
313048 29692 CVE-2007-6335 MILW0RM:4862  View
313049 29692 CVE-2007-6335 URL:http://www.milw0rm.com/exploits/4862  View
313050 29692 CVE-2007-6335 CONFIRM:http://docs.info.apple.com/article.html?artnum=307562  View
313051 29692 CVE-2007-6335 APPLE:APPLE-SA-2008-03-18  View
313052 29692 CVE-2007-6335 URL:http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html  View
313053 29692 CVE-2007-6335 DEBIAN:DSA-1435  View
313054 29692 CVE-2007-6335 URL:http://www.debian.org/security/2007/dsa-1435  View
313055 29692 CVE-2007-6335 FEDORA:FEDORA-2008-0115  View
313056 29692 CVE-2007-6335 URL:https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00740.html  View
313057 29692 CVE-2007-6335 FEDORA:FEDORA-2008-0170  View
313058 29692 CVE-2007-6335 URL:https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00644.html  View
313059 29692 CVE-2007-6335 GENTOO:GLSA-200712-20  View
313060 29692 CVE-2007-6335 URL:http://security.gentoo.org/glsa/glsa-200712-20.xml  View
313061 29692 CVE-2007-6335 MANDRIVA:MDVSA-2008:003  View
313062 29692 CVE-2007-6335 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2008:003  View
313063 29692 CVE-2007-6335 SUSE:SUSE-SR:2008:001  View
313064 29692 CVE-2007-6335 URL:http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html  View
313065 29692 CVE-2007-6335 BID:26927  View
313066 29692 CVE-2007-6335 URL:http://www.securityfocus.com/bid/26927  View
313067 29692 CVE-2007-6335 VUPEN:ADV-2007-4253  View
313068 29692 CVE-2007-6335 URL:http://www.vupen.com/english/advisories/2007/4253  View
313069 29692 CVE-2007-6335 VUPEN:ADV-2008-0924  View
313070 29692 CVE-2007-6335 URL:http://www.vupen.com/english/advisories/2008/0924/references  View
313071 29692 CVE-2007-6335 SECTRACK:1019112  View
313072 29692 CVE-2007-6335 URL:http://www.securitytracker.com/id?1019112  View
313073 29692 CVE-2007-6335 SECUNIA:28117  View
313074 29692 CVE-2007-6335 URL:http://secunia.com/advisories/28117  View
313075 29692 CVE-2007-6335 SECUNIA:28176  View
313076 29692 CVE-2007-6335 URL:http://secunia.com/advisories/28176  View
313077 29692 CVE-2007-6335 SECUNIA:28278  View
313078 29692 CVE-2007-6335 URL:http://secunia.com/advisories/28278  View
313079 29692 CVE-2007-6335 SECUNIA:28153  View
313080 29692 CVE-2007-6335 URL:http://secunia.com/advisories/28153  View
313081 29692 CVE-2007-6335 SECUNIA:28421  View
313082 29692 CVE-2007-6335 URL:http://secunia.com/advisories/28421  View
313083 29692 CVE-2007-6335 SECUNIA:28412  View
313084 29692 CVE-2007-6335 URL:http://secunia.com/advisories/28412  View
313085 29692 CVE-2007-6335 SECUNIA:28587  View
313086 29692 CVE-2007-6335 URL:http://secunia.com/advisories/28587  View
313087 29692 CVE-2007-6335 SECUNIA:29420  View
313088 29692 CVE-2007-6335 URL:http://secunia.com/advisories/29420  View
313089 29692 CVE-2007-6335 XF:clamantivirus-libclamav-mewpe-bo(39119)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52461 JVNDB-2007-001153 ClamAV の bzip2 の復元アルゴリズムにおける脆弱性 ClamAV の nsis/bzlib_private.h には、bzip2 の復元アルゴリズムにおいて、詳細不明の脆弱性が存在します。 CVE-2007-6337 29692 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001153.html  View