CVE-2007-3725

Published: Jul 12, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The RAR VM (unrarvm.c) in Clam Antivirus (ClamAV) before 0.91 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted RAR archive, resulting in a NULL pointer dereference.

Affected (54)

Products: Clam Anti Virus: Clamav

Clam Anti Virus

1 product

Configuration A

54 vulnerable

Vulnerable Software	Affected Versions
Clam Anti Virus Clamav	Version 0.15
Clam Anti Virus Clamav	Version 0.20
Clam Anti Virus Clamav	Version 0.21
Clam Anti Virus Clamav	Version 0.22
Clam Anti Virus Clamav	Version 0.23
Clam Anti Virus Clamav	Version 0.24
Clam Anti Virus Clamav	Version 0.51
Clam Anti Virus Clamav	Version 0.52
Clam Anti Virus Clamav	Version 0.53
Clam Anti Virus Clamav	Version 0.54
Clam Anti Virus Clamav	Version 0.60
Clam Anti Virus Clamav	Version 0.60p
Clam Anti Virus Clamav	Version 0.65
Clam Anti Virus Clamav	Version 0.67
Clam Anti Virus Clamav	Version 0.68.1
Clam Anti Virus Clamav	Version 0.68
Clam Anti Virus Clamav	Version 0.70
Clam Anti Virus Clamav	Version 0.71
Clam Anti Virus Clamav	Version 0.72
Clam Anti Virus Clamav	Version 0.73
Clam Anti Virus Clamav	Version 0.74
Clam Anti Virus Clamav	Version 0.75.1
Clam Anti Virus Clamav	Version 0.75
Clam Anti Virus Clamav	Version 0.80
Clam Anti Virus Clamav	Version 0.80_rc1
Clam Anti Virus Clamav	Version 0.80_rc2
Clam Anti Virus Clamav	Version 0.80_rc3
Clam Anti Virus Clamav	Version 0.80_rc4
Clam Anti Virus Clamav	Version 0.81
Clam Anti Virus Clamav	Version 0.81_rc1
Clam Anti Virus Clamav	Version 0.82
Clam Anti Virus Clamav	Version 0.83
Clam Anti Virus Clamav	Version 0.84
Clam Anti Virus Clamav	Version 0.84_rc1
Clam Anti Virus Clamav	Version 0.84_rc2
Clam Anti Virus Clamav	Version 0.85.1
Clam Anti Virus Clamav	Version 0.85
Clam Anti Virus Clamav	Version 0.86.1
Clam Anti Virus Clamav	Version 0.86.2
Clam Anti Virus Clamav	Version 0.86
Clam Anti Virus Clamav	Version 0.86_rc1
Clam Anti Virus Clamav	Version 0.87.1
Clam Anti Virus Clamav	Version 0.87
Clam Anti Virus Clamav	Version 0.88.1
Clam Anti Virus Clamav	Version 0.88.3
Clam Anti Virus Clamav	Version 0.88.4
Clam Anti Virus Clamav	Version 0.88.5
Clam Anti Virus Clamav	Version 0.88.6
Clam Anti Virus Clamav	Version 0.88.7
Clam Anti Virus Clamav	Version 0.88
Clam Anti Virus Clamav	Version 0.90
Clam Anti Virus Clamav	Version 0.90_rc1.1
Clam Anti Virus Clamav	Version 0.90_rc2
Clam Anti Virus Clamav	Version 0.90_rc3

References (48)

http://docs.info.apple.com/article.html?artnum=307562

Source: cve@mitre.org

http://kolab.org/security/kolab-vendor-notice-16.txt

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064569.html

Source: cve@mitre.org

http://osvdb.org/36907

Source: cve@mitre.org

http://secunia.com/advisories/26038

Source: cve@mitre.org

http://secunia.com/advisories/26164

Source: cve@mitre.org

http://secunia.com/advisories/26209

Source: cve@mitre.org

http://secunia.com/advisories/26226

Source: cve@mitre.org

http://secunia.com/advisories/26231

Source: cve@mitre.org

http://secunia.com/advisories/26377

Source: cve@mitre.org

http://secunia.com/advisories/29420

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200708-04.xml

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1340

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:150

Source: cve@mitre.org

http://www.metaeye.org/advisories/54

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.novell.com/linux/security/advisories/2007_15_sr.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/473371/100/0/threaded

Source: cve@mitre.org

http://www.trustix.org/errata/2007/0023/

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/2509

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/2643

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0924/references

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35367

Source: cve@mitre.org

https://wwws.clamav.net/bugzilla/show_bug.cgi?id=555

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=307562

Source: af854a3a-2127-422b-91ae-364da2661108

http://kolab.org/security/kolab-vendor-notice-16.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064569.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/36907

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26038

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26164

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26209

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26226

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26231

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26377

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29420

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200708-04.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2007/dsa-1340

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2007:150

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.metaeye.org/advisories/54

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.novell.com/linux/security/advisories/2007_15_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/473371/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.trustix.org/errata/2007/0023/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/2509

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/2643

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0924/references

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/35367

Source: af854a3a-2127-422b-91ae-364da2661108

https://wwws.clamav.net/bugzilla/show_bug.cgi?id=555

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.