CVE-2007-1745
- State
- Published
- Severity
- Not scored
- Published
- Apr 16, 2007
- Updated
- Aug 7, 2024
- Reserved
- Mar 29, 2007
Description
The chm_decompress_stream function in libclamav/chmunpack.c in Clam AntiVirus (ClamAV) before 0.90.2 leaks file descriptors, which has unknown impact and attack vectors involving a crafted CHM file, a different vulnerability than CVE-2007-0897. NOTE: some of these details are obtained from third party information.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 25022third-party-advisory
- 34913vdb-entry
- 2007-0013vendor-advisory
- 23473vdb-entry
- 24996third-party-advisory
- MDKSA-2007:098vendor-advisory
- ADV-2008-0924vdb-entry
- SUSE-SA:2007:026vendor-advisory
- 29420third-party-advisory
- APPLE-SA-2008-03-18vendor-advisory
- 25189third-party-advisory
- http://docs.info.apple.com/article.html?artnum=307562
- clamav-chmdecompressstream-dos(33636)vdb-entry
- http://support.novell.com/techcenter/psdb/50a5cb718f20761dd7e0b6b4e0935c52.html
- http://sourceforge.net/project/shownotes.php?release_id=500765
- ADV-2007-1378vdb-entry
- 25028third-party-advisory
- GLSA-200704-21vendor-advisory
- 24946third-party-advisory
- DSA-1281vendor-advisory
- 24920third-party-advisory
- 24891third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.