Vulnerability in Clam Anti-Virus Clamav
CVE-2007-2029
File descriptor leak in the PDF handler in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service via a crafted PDF file.
EPSS: 0.030 (86.1th percentile) — read the EPSS interpretation.
Affected products
- Clam_anti-virus Clamav — versions 0.84_rc2
- Debian Debian_linux — versions 3.1, 4.0
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRIVA)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)
Frequently asked questions
- What is CVE-2007-2029?
- CVE-2007-2029 is a vulnerability in Clam Anti-Virus Clamav, classified under CWE-399. Published 2007-04-30.
- Is CVE-2007-2029 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.