CVE-2007-6336

Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file

published December 20, 2007

CVSS
—
EPSS
4%
Percentile
90.9
In the wild
Unconfirmed
What it is

Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04215 · 90.9th percentile
Published
2007-12-20T01:00Z
EPSS history
Timeline
  • 20 DEC 01:00Z
    Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file
    cvelistv5