4.3
CVE-2007-4510
- EPSS 3.12%
- Published 23.08.2007 19:17:00
- Last modified 09.04.2025 00:30:58
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service (application crash) via (1) a crafted RTF file, which triggers a NULL dereference in the cli_scanrtf function in libclamav/rtf.c; or (2) a crafted HTML document with a data: URI, which triggers a NULL dereference in the cli_html_normalise function in libclamav/htmlnorm.c. NOTE: some of these details are obtained from third party information.
Data is provided by the National Vulnerability Database (NVD)
Clam Anti-virus ≫ Clamav Version <= 0.91.2
Kolab ≫ Kolab Server Version2.0
Kolab ≫ Kolab Server Version2.0.1
Kolab ≫ Kolab Server Version2.0.2
Kolab ≫ Kolab Server Version2.0.3
Kolab ≫ Kolab Server Version2.0.4
Kolab ≫ Kolab Server Version2.1
Kolab ≫ Kolab Server Version2.2beta1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.12% | 0.863 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:N/A:P
|