CVE-2007-2650
CVE-2007-2650 is a medium-severity vulnerability in Clamav with a CVSS 2.0 base score of 4.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-400.
Key facts
- Severity: Medium (CVSS 2.0 base score 4.3)
- EPSS exploit prediction: 3% (87th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-400
- Affected product: Clamav
- Published:
- Last modified:
Description
The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) via an OLE2 file with (1) a large property size or (2) a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file.
Frequently asked questions
- What is CVE-2007-2650?
- The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) via an OLE2 file with (1) a large property size or (2) a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file.
- How severe is CVE-2007-2650?
- CVE-2007-2650 has a CVSS 2.0 base score of 4.3, rated medium severity.
- Is CVE-2007-2650 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (87th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2007-2650?
- CVE-2007-2650 primarily affects Clamav. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2007-2650?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2007-2650 published?
- CVE-2007-2650 was published on 2007-05-14 and last updated on 2026-06-16.
References
- http://article.gmane.org/gmane.comp.security.virus.clamav.devel/2853
- http://kolab.org/security/kolab-vendor-notice-15.txt
- http://lurker.clamav.net/message/20070418.111144.0df6c5d3.en.html
- http://secunia.com/advisories/25244
- http://secunia.com/advisories/25523
- http://secunia.com/advisories/25525
- http://secunia.com/advisories/25553
- http://secunia.com/advisories/25558
- http://secunia.com/advisories/25688
- http://secunia.com/advisories/25796
- http://security.gentoo.org/glsa/glsa-200706-05.xml
- http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog
- http://www.debian.org/security/2007/dsa-1320
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:115
- http://www.novell.com/linux/security/advisories/2007_33_clamav.html
- http://www.securityfocus.com/bid/24316
- http://www.trustix.org/errata/2007/0020/
- http://www.vupen.com/english/advisories/2007/1776
Affected products (3)
- cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
More vulnerabilities in Clamav
- CVE-2010-0098 — Critical (CVSS 10.0): ClamAV before 0.96 does not properly handle the (1) CAB and (2) 7z file formats, which allows remote attackers to…
- CVE-2009-1372 — Critical (CVSS 10.0): Stack-based buffer overflow in the cli_url_canon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows…
- CVE-2008-3914 — Critical (CVSS 10.0): Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file…
- CVE-2008-0728 — Critical (CVSS 10.0): The unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that…
- CVE-2006-1615 — Critical (CVSS 10.0): Multiple format string vulnerabilities in the logging code in Clam AntiVirus (ClamAV) before 0.88.1 might allow remote…
- CVE-2025-20260 — Critical (CVSS 9.8): A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a…
Other CWE-400 (Uncontrolled Resource Consumption) vulnerabilities
- CVE-2026-46775 — Critical (CVSS 9.9): Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0.…
- CVE-2025-61303 — Critical (CVSS 9.8): Hatching Triage Sandbox Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021(2025-08-14) contains a…
- CVE-2025-43193 — Critical (CVSS 9.8): The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7,…
- CVE-2025-24269 — Critical (CVSS 9.8): The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4. An app may be able to…
- CVE-2025-24264 — Critical (CVSS 9.8): The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4,…
- CVE-2025-24260 — Critical (CVSS 9.8): The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5,…
Browse all CWE-400 (Uncontrolled Resource Consumption) vulnerabilities →