CVE-2007-6595

LOW 2.1CVE-2007-6595 · Published 31/12/2007 · updated 16/06/2026

In short

CVE-2007-6595 is a LOW (CVSS 2.1) vulnerability affecting clamav (clam anti-virus).
Chance of exploitation in the next 30 days (EPSS): 0.41%, higher than 34.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
clamav clam_anti-virus	`= 0.92`	No fix yet

Description

ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary files used by the cli_gentempfd function in libclamav/others.c or on (2) .ascii files used by sigtool, when utf16-decode is enabled.

References

kolab.org/security/kolab-vendor-notice-19.txt
lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html
secunia.com/advisories/28949 · Vendor Advisory
secunia.com/advisories/29891
secunia.com/advisories/31437
security.gentoo.org/glsa/glsa-200808-07.xml
securityreason.com/securityalert/3501
securitytracker.com/id
debian.org/security/2008/dsa-1497
mandriva.com/security/advisories
securityfocus.com/archive/1/485631/100/0/threaded
securityfocus.com/bid/27064
vupen.com/english/advisories/2008/0606
exchange.xforce.ibmcloud.com/vulnerabilities/39335
exchange.xforce.ibmcloud.com/vulnerabilities/39339

More vulnerabilities in clamav

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free