Skip to main content

Early Access — Mondoo Vulnerability Intelligence is currently in preview.

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2007-0897 | Mondoo Vulnerability Intelligence

CVE-2007-0897

HIGH7.5

Clam AntiVirus ClamAV before 0

Published Feb 16, 2007

Modified 1 years ago

No fix available

Details

Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allows remote attackers to cause a denial of service (file descriptor consumption and failed scans) via CAB archives with a cabinet header record length of zero, which causes a function to return without closing a file descriptor.

References

WEBhttp://docs.info.apple.com/article.html?artnum=307562 ADVISORYhttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=475 ADVISORYhttp://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html ADVISORYhttp://lists.suse.com/archive/suse-security-announce/2007-Feb/0004.html WEBhttp://osvdb.org/32283 ADVISORYhttp://secunia.com/advisories/24183 ADVISORYhttp://secunia.com/advisories/24187 ADVISORYhttp://secunia.com/advisories/24192 ADVISORYhttp://secunia.com/advisories/24319 ADVISORYhttp://secunia.com/advisories/24332 ADVISORYhttp://secunia.com/advisories/24425 ADVISORYhttp://secunia.com/advisories/29420 ADVISORYhttp://security.gentoo.org/glsa/glsa-200703-03.xml ADVISORYhttp://www.debian.org/security/2007/dsa-1263 ADVISORYhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:043 WEBhttp://www.securityfocus.com/bid/22580 WEBhttp://www.securitytracker.com/id?1017659 WEBhttp://www.vupen.com/english/advisories/2007/0623 WEBhttp://www.vupen.com/english/advisories/2008/0924/references WEBhttps://exchange.xforce.ibmcloud.com/vulnerabilities/32531 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2007-0897

CVSS Analysis

CVSS v3.1

7.5

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Ecosystems

Timeline

PublishedFeb 16, 2007

ModifiedAug 7, 2024