CVE-2007-6337

CRITICAL 10.0CVE-2007-6337 · Published 31/12/2007 · updated 16/06/2026

In short

CVE-2007-6337 is a CRITICAL (CVSS 10.0) vulnerability affecting clamav (clam anti-virus).
Chance of exploitation in the next 30 days (EPSS): 2.8%, higher than 86.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
clamav clam_anti-virus	`= 0.91.2`	No fix yet

Description

Unspecified vulnerability in the bzip2 decompression algorithm in nsis/bzlib_private.h in ClamAV before 0.92 has unknown impact and remote attack vectors.

References

docs.info.apple.com/article.html
lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
osvdb.org/42293
secunia.com/advisories/28153
secunia.com/advisories/28278
secunia.com/advisories/28412
secunia.com/advisories/28421
secunia.com/advisories/28587
secunia.com/advisories/29420
security.gentoo.org/glsa/glsa-200712-20.xml
securitytracker.com/id
mandriva.com/security/advisories
securityfocus.com/bid/27063 · Patch
vupen.com/english/advisories/2008/0924/references

More vulnerabilities in clamav

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free