CVE-2007-4510: clam_anti-virus clamav
Vulnerability summary
CVE-2007-4510 is a medium (CVSS 4.3) vulnerability in clam_anti-virus clamav. EPSS estimates a 1.97% chance of exploitation in the next 30 days, higher than 80.1% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 23-08-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service (application crash) via (1) a crafted RTF file, which triggers a NULL dereference in the cli_scanrtf function in libclamav/rtf.c; or (2) a crafted HTML document with a data: URI, which triggers a NULL dereference in the cli_html_normalise function in libclamav/htmlnorm.c. NOTE: some of these details are obtained from third party information.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.97%
Chance of exploitation in the next 30 days
Percentile
80%
Versus all other CVEs
30-day change
0.00 pp
From 1.97% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Clam_anti-virus1 product
- clamav≤ 0.91.2
Debian1 product
- clamav< 0.91.2-1~volatile1
Kolab1 product
- kolab_server2.0 | 2.0.1 | 2.0.2 | 2.0.3 | 2.0.4 | 2.1 | 2.2beta1
3 vendors · 3 products
References
28 links- www.redhat.com/archives/fedora-package-announce/2007-September/msg00104.htmlVendor AdvisoryX Refsource FEDORA
- kolab.org/security/kolab-vendor-notice-17.txtX Refsource CONFIRM
Show all 28 references
- wwws.clamav.net/bugzilla/show_bug.cgi?id=611X Refsource CONFIRM
- wwws.clamav.net/bugzilla/show_bug.cgi?id=582X Refsource CONFIRM
- docs.info.apple.com/article.html?artnum=307562X Refsource CONFIRM
- sourceforge.net/project/shownotes.php?release_id=533658X Refsource CONFIRM