NVD

Id
54167  
Name
CVE-2007-1997  
Description
Integer signedness error in the (1) cab_unstore and (2) cab_extract functions in libclamav/cab.c in Clam AntiVirus (ClamAV) before 0.90.2 allow remote attackers to execute arbitrary code via a crafted CHM file that contains a negative integer, which passes a signed comparison and leads to a stack-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-04-16  
Modified Date
2011-03-07  
Seq
2007-1997  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
274678 54167 CVE-2007-1997 http://docs.info.apple.com/article.html?artnum=307562  View
274679 54167 CVE-2007-1997 20070416 Clam AntiVirus ClamAV CAB File Unstore Buffer Overflow Vulnerability  View
274680 54167 CVE-2007-1997 APPLE-SA-2008-03-18  View
274681 54167 CVE-2007-1997 GLSA-200704-21  View
274682 54167 CVE-2007-1997 http://sourceforge.net/project/shownotes.php?release_id=500765  View
274683 54167 CVE-2007-1997 http://support.novell.com/techcenter/psdb/50a5cb718f20761dd7e0b6b4e0935c52.html  View
274684 54167 CVE-2007-1997 DSA-1281  View
274685 54167 CVE-2007-1997 MDKSA-2007:098  View
274686 54167 CVE-2007-1997 SUSE-SA:2007:026  View
274687 54167 CVE-2007-1997 23473  View
274688 54167 CVE-2007-1997 1017921  View
274689 54167 CVE-2007-1997 2007-0013  View
274690 54167 CVE-2007-1997 ADV-2007-1378  View
274691 54167 CVE-2007-1997 ADV-2008-0924  View
274692 54167 CVE-2007-1997 clamav-cabunstore-cabextract-bo(33637)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52454 JVNDB-2007-001146 ClamAV の cab_unstore() 関数および cab_extract() 関数におけるバッファオーバーフローの脆弱性 ClamAV の libclamav/cab.c には、cab_unstore() 関数および cab_extract() 関数において、負の整数を含む CHM ファイルの取り扱いに不備があり、整数符号のエラーにより、スタックベースのバッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-1997 25352 CVE-2007-1997 54167 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001146.html 2007-04-16 2008-04-11 View