CVE-2007-6335 Integer overflow in n/a
Remote attackers can execute arbitrary code via a crafted MEW packed PE file due to an integer overflow in the ClamAV library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-6335?
CVE-2007-6335 is a high-severity vulnerability in Clam Anti-Virus Clamav, published on 20 Dec 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow.
Weakness: CWE-189
Which versions are affected by CVE-2007-6335?
It affects 1 product.
Products include Clam Anti-Virus Clamav.
How do I fix CVE-2007-6335?
Upgrade to a fixed version.
Is CVE-2007-6335 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-6335 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Clam Anti-Virus Clamav
- CVE-2008-1100 Memory corruption in n/a
- CVE-2008-0318 Integer overflow in n/a
- CVE-2007-6337 Unspecified vulnerability in the bzip2 decompression algorithm in nsis/bzlib_private.h in ClamAV before 0.92 has unknown impact and remote attack vectors.
- CVE-2007-3023 Memory corruption in n/a
- CVE-2005-3587 Memory corruption in n/a
Sources
Also known as CVE-2007-5759, DEBIAN-CVE-2007-6335, GHSA-7p49-jrwj-cxrj.