Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2007-4510

Published: 23/08/2007 Updated: 29/07/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Subscribe to Kolab Server

Vulnerability Summary

ClamAV prior to 0.91.2, as used in Kolab Server 2.0 up to and including 2.2beta1 and other products, allows remote malicious users to cause a denial of service (application crash) via (1) a crafted RTF file, which triggers a NULL dereference in the cli_scanrtf function in libclamav/rtf.c; or (2) a crafted HTML document with a data: URI, which triggers a NULL dereference in the cli_html_normalise function in libclamav/htmlnorm.c. NOTE: some of these details are obtained from third party information.

Vulnerable Product Search on Vulmon Subscribe to Product

kolab kolab server 2.0

clam anti-virus clamav

kolab kolab server 2.1

kolab kolab server 2.2beta1

kolab kolab server 2.0.1

kolab kolab server 2.0.2

kolab kolab server 2.0.3

kolab kolab server 2.0.4

Vendor Advisories

Debian Security Advisories: DSA-1366-1 clamav -- several vulnerabilities
Several remote vulnerabilities have been discovered in the Clam anti-virus toolkit The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-4510 It was discovered that the RTF and RFC2397 parsers can be tricked into dereferencing a NULL pointer, resulting in denial of service CVE-2007-4560 It was d ...

References

NVD-CWE-Otherhttp://kolab.org/security/kolab-vendor-notice-17.txthttp://sourceforge.net/project/shownotes.php?release_id=533658https://wwws.clamav.net/bugzilla/show_bug.cgi?id=582https://wwws.clamav.net/bugzilla/show_bug.cgi?id=611http://www.securityfocus.com/bid/25398http://secunia.com/advisories/26530http://secunia.com/advisories/26552http://www.debian.org/security/2007/dsa-1366https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00104.htmlhttp://security.gentoo.org/glsa/glsa-200709-14.xmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:172http://www.novell.com/linux/security/advisories/2007_18_sr.htmlhttp://www.trustix.org/errata/2007/0026/http://secunia.com/advisories/26674http://secunia.com/advisories/26654http://secunia.com/advisories/26683http://secunia.com/advisories/26751http://secunia.com/advisories/26822http://secunia.com/advisories/26916http://securityreason.com/securityalert/3054http://docs.info.apple.com/article.html?artnum=307562http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.htmlhttp://secunia.com/advisories/29420http://www.vupen.com/english/advisories/2007/2952http://www.vupen.com/english/advisories/2008/0924/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/36177https://exchange.xforce.ibmcloud.com/vulnerabilities/36173https://nvd.nist.govhttps://www.debian.org/security/./dsa-1366
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
XXECVE-2024-34490SQL injectionCVE-2024-34488CVE-2024-4507CVE-2023-7028CVE-2024-23187TCPCVE-2024-4439
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook