CVE-2007-1745: clam_anti-virus clamav
Vulnerability summary
CVE-2007-1745 is a high (CVSS 7.1) vulnerability in clam_anti-virus clamav. EPSS estimates a 2.33% chance of exploitation in the next 30 days, higher than 83.2% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 3 · Related 1Timeline
- 16-04-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The chm_decompress_stream function in libclamav/chmunpack.c in Clam AntiVirus (ClamAV) before 0.90.2 leaks file descriptors, which has unknown impact and attack vectors involving a crafted CHM file, a different vulnerability than CVE-2007-0897. NOTE: some of these details are obtained from third party information.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.33%
Chance of exploitation in the next 30 days
Percentile
83%
Versus all other CVEs
30-day change
0.00 pp
From 2.33% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Clam_anti-virus1 product
- clamav≤ 0.90.1
Debian1 product
- clamav< 0.90.2-1
Ifenslave1 product
- ifenslave0.88
3 vendors · 3 products
References
23 linksShow all 23 references
- docs.info.apple.com/article.html?artnum=307562X Refsource CONFIRM
- support.novell.com/techcenter/psdb/50a5cb718f20761dd7e0b6b4e0935c52.htmlX Refsource CONFIRM
- sourceforge.net/project/shownotes.php?release_id=500765X Refsource CONFIRM
