CVEvulnerability

CVE-2007-3725

4.3 MEDIUM Published 2007-07-12 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-07-12
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P

Description

The RAR VM (unrarvm.c) in Clam Antivirus (ClamAV) before 0.91 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted RAR archive, resulting in a NULL pointer dereference.

Affected configurations

• clam anti-virus clamav 0.15 • clam anti-virus clamav 0.20 • clam anti-virus clamav 0.21 • clam anti-virus clamav 0.22 • clam anti-virus clamav 0.23 • clam anti-virus clamav 0.24 • clam anti-virus clamav 0.51 • clam anti-virus clamav 0.52 • clam anti-virus clamav 0.53 • clam anti-virus clamav 0.54 • clam anti-virus clamav 0.60 • clam anti-virus clamav 0.60p • clam anti-virus clamav 0.65 • clam anti-virus clamav 0.67 • clam anti-virus clamav 0.68 • clam anti-virus clamav 0.68.1 • clam anti-virus clamav 0.70 • clam anti-virus clamav 0.71 • clam anti-virus clamav 0.72 • clam anti-virus clamav 0.73 • clam anti-virus clamav 0.74 • clam anti-virus clamav 0.75 • clam anti-virus clamav 0.75.1 • clam anti-virus clamav 0.80 • clam anti-virus clamav 0.80 rc1 • clam anti-virus clamav 0.80 rc2 • clam anti-virus clamav 0.80 rc3 • clam anti-virus clamav 0.80 rc4 • clam anti-virus clamav 0.81 • clam anti-virus clamav 0.81 rc1 • clam anti-virus clamav 0.82 • clam anti-virus clamav 0.83 • clam anti-virus clamav 0.84 • clam anti-virus clamav 0.84 rc1 • clam anti-virus clamav 0.84 rc2 • clam anti-virus clamav 0.85 • clam anti-virus clamav 0.85.1 • clam anti-virus clamav 0.86 • clam anti-virus clamav 0.86.1 • clam anti-virus clamav 0.86.2 • clam anti-virus clamav 0.86 rc1 • clam anti-virus clamav 0.87 • clam anti-virus clamav 0.87.1 • clam anti-virus clamav 0.88 • clam anti-virus clamav 0.88.1 • clam anti-virus clamav 0.88.3 • clam anti-virus clamav 0.88.4 • clam anti-virus clamav 0.88.5 • clam anti-virus clamav 0.88.6 • clam anti-virus clamav 0.88.7 • clam anti-virus clamav 0.90 • clam anti-virus clamav 0.90 rc1.1 • clam anti-virus clamav 0.90 rc2 • clam anti-virus clamav 0.90 rc3

References

http://docs.info.apple.com/article.html?artnum=307562 docs.info.apple.com
http://kolab.org/security/kolab-vendor-notice-16.txt kolab.org
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html lists.apple.com
http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064569.html lists.grok.org.uk
http://osvdb.org/36907 osvdb.org
http://secunia.com/advisories/26038 secunia.com
http://secunia.com/advisories/26164 secunia.com
http://secunia.com/advisories/26209 secunia.com
http://secunia.com/advisories/26226 secunia.com
http://secunia.com/advisories/26231 secunia.com
http://secunia.com/advisories/26377 secunia.com
http://secunia.com/advisories/29420 secunia.com
http://security.gentoo.org/glsa/glsa-200708-04.xml security.gentoo.org
http://www.debian.org/security/2007/dsa-1340 www.debian.org
http://www.mandriva.com/security/advisories?name=MDKSA-2007:150 www.mandriva.com
http://www.metaeye.org/advisories/54 Exploit, Patch, Vendor Advisory
http://www.novell.com/linux/security/advisories/2007_15_sr.html www.novell.com
http://www.securityfocus.com/archive/1/473371/100/0/threaded www.securityfocus.com
http://www.trustix.org/errata/2007/0023/ www.trustix.org
http://www.vupen.com/english/advisories/2007/2509 www.vupen.com
http://www.vupen.com/english/advisories/2007/2643 www.vupen.com
http://www.vupen.com/english/advisories/2008/0924/references www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/35367 exchange.xforce.ibmcloud.com
https://wwws.clamav.net/bugzilla/show_bug.cgi?id=555 wwws.clamav.net
http://docs.info.apple.com/article.html?artnum=307562 docs.info.apple.com
http://kolab.org/security/kolab-vendor-notice-16.txt kolab.org
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html lists.apple.com
http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064569.html lists.grok.org.uk
http://osvdb.org/36907 osvdb.org
http://secunia.com/advisories/26038 secunia.com
http://secunia.com/advisories/26164 secunia.com
http://secunia.com/advisories/26209 secunia.com
http://secunia.com/advisories/26226 secunia.com
http://secunia.com/advisories/26231 secunia.com
http://secunia.com/advisories/26377 secunia.com
http://secunia.com/advisories/29420 secunia.com
http://security.gentoo.org/glsa/glsa-200708-04.xml security.gentoo.org
http://www.debian.org/security/2007/dsa-1340 www.debian.org
http://www.mandriva.com/security/advisories?name=MDKSA-2007:150 www.mandriva.com
http://www.metaeye.org/advisories/54 Exploit, Patch, Vendor Advisory
http://www.novell.com/linux/security/advisories/2007_15_sr.html www.novell.com
http://www.securityfocus.com/archive/1/473371/100/0/threaded www.securityfocus.com
http://www.trustix.org/errata/2007/0023/ www.trustix.org
http://www.vupen.com/english/advisories/2007/2509 www.vupen.com
http://www.vupen.com/english/advisories/2007/2643 www.vupen.com
http://www.vupen.com/english/advisories/2008/0924/references www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/35367 exchange.xforce.ibmcloud.com
https://wwws.clamav.net/bugzilla/show_bug.cgi?id=555 wwws.clamav.net