Debian/clamav: unknown

Integer signedness error in the (1) cab_unstore and (2) cab_extract functions in libclamav/cab.c in Clam AntiVirus (ClamAV) before 0.90.2 allow remote attackers to execute arbitrary code via a crafted

Action: Upgrade clamav to 0.90.2-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-1997
• https://security-tracker.debian.org/tracker/CVE-2007-1997

published 2007-04-16T21:19:00Z · modified 2026-10-21T17:47:48.522025379Z · JSON