CVE-2007-6595

ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary files used by the cli_gentempfd function in…

published December 31, 2007

CVSS
—
EPSS
0%
Percentile
33.4
In the wild
Unconfirmed
What it is

ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary files used by the cli_gentempfd function in libclamav/others.c or on (2) .ascii files used by sigtool, when utf16-decode is enabled.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00406 · 33.4th percentile
Published
2007-12-31T19:00Z
EPSS history
Timeline
  • 31 DEC 19:00Z
    ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary files used by the cli_gentempfd function in…
    cvelistv5