CVE-2007-3123
CVE-2007-3123 is a medium-severity vulnerability in Clam Anti-virus Clamav with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 3% (83rd percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Clam Anti-virus Clamav
- Published:
- Last modified:
Description
unrar.c in libclamav in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to cause a denial of service (core dump) via a crafted RAR file with a modified vm_codesize value, which triggers a heap-based buffer overflow.
Frequently asked questions
- What is CVE-2007-3123?
- unrar.c in libclamav in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to cause a denial of service (core dump) via a crafted RAR file with a modified vm_codesize value, which triggers a heap-based buffer overflow.
- How severe is CVE-2007-3123?
- CVE-2007-3123 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2007-3123 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (83rd percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2007-3123?
- CVE-2007-3123 primarily affects Clam Anti-virus Clamav. In total, 6 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2007-3123?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2007-3123 published?
- CVE-2007-3123 was published on 2007-06-07 and last updated on 2026-06-16.
References
- http://kolab.org/security/kolab-vendor-notice-15.txt
- http://lurker.clamav.net/message/20070530.224918.5c64abc4.en.html
- http://osvdb.org/35522
- http://secunia.com/advisories/25523
- http://secunia.com/advisories/25525
- http://secunia.com/advisories/25688
- http://secunia.com/advisories/25796
- http://security.gentoo.org/glsa/glsa-200706-05.xml
- http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog
- http://www.debian.org/security/2007/dsa-1320
- http://www.novell.com/linux/security/advisories/2007_33_clamav.html
- http://www.securityfocus.com/bid/24289
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34778
- https://wwws.clamav.net/bugzilla/show_bug.cgi?id=521
Affected products (6)
- cpe:2.3:a:clam_anti-virus:clamav:0.90:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.90.1:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.90.2:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.90_rc1.1:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.90_rc2:*:*:*:*:*:*:*
- cpe:2.3:a:clam_anti-virus:clamav:0.90_rc3:*:*:*:*:*:*:*
More vulnerabilities in Clam Anti-virus Clamav
- CVE-2008-1100 — Critical (CVSS 10.0): Buffer overflow in the cli_scanpe function in libclamav (libclamav/pe.c) for ClamAV 0.92 and 0.92.1 allows remote…
- CVE-2008-0318 — Critical (CVSS 10.0): Integer overflow in the cli_scanpe function in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote…
- CVE-2007-6337 — Critical (CVSS 10.0): Unspecified vulnerability in the bzip2 decompression algorithm in nsis/bzlib_private.h in ClamAV before 0.92 has…
- CVE-2007-3023 — Critical (CVSS 10.0): unsp.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 does not properly calculate the end of a certain buffer, with…
- CVE-2005-3587 — Critical (CVSS 10.0): Improper boundary checks in petite.c in Clam AntiVirus (ClamAV) before 0.87.1 allows attackers to perform unknown…
- CVE-2008-5050 — Critical (CVSS 9.3): Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1…