CVE-2007-6336: clam_anti-virus clamav

EPSS trend

Probability

4.21%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.21% on 18-09-2026

18-09-202618-10-2026

EPSS score

4.21%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

20 links

www.mandriva.com/security/advisories?name=MDVSA-2008:003Vendor AdvisoryX Refsource MANDRIVA
www.debian.org/security/2007/dsa-1435Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/28412Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2008/0924/referencesVDB EntryX Refsource VUPENVendor Advisory
www.redhat.com/archives/fedora-package-announce/2008-January/msg00644.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/28421Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/29420Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.apple.com/archives/security-announce/2008/Mar/msg00001.htmlVendor AdvisoryX Refsource APPLE
www.redhat.com/archives/fedora-package-announce/2008-January/msg00740.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/28176Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Show all 20 references

secunia.com/advisories/28587Third Party AdvisoryX Refsource SECUNIAVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/39169VDB EntryX Refsource XF
secunia.com/advisories/28153Third Party AdvisoryX Refsource SECUNIAVendor Advisory
docs.info.apple.com/article.html?artnum=307562X Refsource CONFIRM
security.gentoo.org/glsa/glsa-200712-20.xmlVendor AdvisoryX Refsource GENTOO
www.securityfocus.com/bid/26946VDB EntryX Refsource BIDPatch
securitytracker.com/id?1019150VDB EntryX Refsource SECTRACK
secunia.com/advisories/28278Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.htmlVendor AdvisoryX Refsource SUSE
security-tracker.debian.org/tracker/CVE-2007-6336Advisory

Related vulnerabilities

CVE-2007-4560clam_anti-virusclamav+183.54%19y ago28-08-2007 01:00clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail."CVE-2007-4510clam_anti-virusclamav+21.97%19y ago23-08-2007 19:00ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service (application crash) via (1) a crafted RTF file, which triggers a NULL dereference in the cli_scanrtf function in libclamav/rtf.c; or (2) a crafted HTML document with a data: URI, which triggers a NULL dereference in the cli_html_normalise function in libclamav/htmlnorm.c. NOTE: some of these details are obtained from third party information.CVE-2005-1795clam_anti-virusclamav3.64%21y ago01-06-2005 04:00The filecopy function in misc.c in Clam AntiVirus (ClamAV) before 0.85, on Mac OS, allows remote attackers to execute arbitrary code via a virus in a filename that contains shell metacharacters, which are not properly handled when HFS permissions prevent the file from being deleted and ditto is invoked.CVE-2005-3239clam_anti-virusclamav+14.48%21y ago14-10-2005 04:00The OLE2 unpacker in clamd in Clam AntiVirus (ClamAV) 0.87-1 allows remote attackers to cause a denial of service (segmentation fault) via a DOC file with an invalid property tree, which triggers an infinite recursion in the ole2_walk_property_tree function.CVE-2008-2713clam_anti-virusclamav+14.71%18y ago16-06-2008 21:00libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read.CVE-2008-1836clam_anti-virusclamav3.55%18y ago16-04-2008 16:00The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read.

All vulnerabilities inclamav

CVE-2007-6336: clam_anti-virus clamav

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References