CVE-2007-6336 - CVE Reference - Advisories

CVE Reference: CVE-2007-6336

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-6336

Description: Off-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MS-ZIP compressed CAB file.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/39169 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html ST 1019150 SAID Secunia Advisory: SA28153 Secunia Advisory: SA28278 Secunia Advisory: SA28176 Secunia Advisory: SA28421 Secunia Advisory: SA28412 Secunia Advisory: SA28587 Secunia Advisory: SA29420 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:003 GENTOO http://security.gentoo.org/glsa/glsa-200712-20.xml FEDORA DEBIAN http://www.debian.org/security/2007/dsa-1435 CONFIRM http://docs.info.apple.com/article.html?artnum=307562 BID 26946 APPLE http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Return to the previous page.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Yahoo! Assistant yNotifier.dll ActiveX Control Code Execution

2.	Cyberfolio "rep" File Inclusion Vulnerability

3.	OpenKM Document Export Security Issue

4.	Zarafa Script Insertion Vulnerabilities

5.	Slackware update for thunderbird

6.	TFTP Server SP Long Error Message Buffer Overflow

7.	SazCart Multiple File Inclusion Vulnerabilities

8.	Maian Search Cross-Site Scripting and SQL Injection Vulnerabilities

9.	InfoBiz Server "keywords" Cross-Site Scripting Vulnerability

10.	Slackware update for php