ClamAV Unspecified Remote Code Execution Vulnerability

Bugtraq ID:	26463
Class:	Unknown
CVE:	CVE-2007-6029
Remote:	Yes
Local:	No
Published:	Nov 15 2007 12:00AM
Updated:	Dec 18 2007 08:04PM
Credit:	This issue was disclosed by WabiSabi Labi.
Vulnerable:	Clam Anti-Virus ClamAV 0.91.2 Clam Anti-Virus ClamAV 0.91.1
Not Vulnerable:

ClamAV Unspecified Remote Code Execution Vulnerability

ClamAV is prone to an unspecified remote code-execution vulnerability.

Very few technical details are currently available. We will update this BID as more information emerges.

Attackers can exploit this issue to execute arbitrary code in the context of the affected application.

ClamAV 0.91.1 is vulnerable; other versions may also be affected.

ClamAV Unspecified Remote Code Execution Vulnerability

Proof-of-concept code has been developed but is not publicly available. Please see the references for more information.

ClamAV Unspecified Remote Code Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ClamAV Unspecified Remote Code Execution Vulnerability

References:

• ClamAV Homepage (ClamAV)
  
• Focus on: ClamAV remote code execution (WabiSabiLabi)