National Cyber Awareness System

Vulnerability Summary for CVE-2007-4510

Overview

ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service (application crash) via (1) a crafted RTF file, which triggers a NULL dereference in the cli_scanrtf function in libclamav/rtf.c; or (2) a crafted HTML document with a data: URI, which triggers a NULL dereference in the cli_html_normalise function in libclamav/htmlnorm.c. NOTE: some of these details are obtained from third party information.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: BID

Name: 25398

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/25398

External Source: SECUNIA

Name: 26552

Type: Advisory; Patch Information

Hyperlink:http://secunia.com/advisories/26552

External Source: SECUNIA

Name: 26530

Type: Advisory; Patch Information

Hyperlink:http://secunia.com/advisories/26530

External Source: CONFIRM

Name: https://wwws.clamav.net/bugzilla/show_bug.cgi?id=611

Hyperlink:https://wwws.clamav.net/bugzilla/show_bug.cgi?id=611

External Source: CONFIRM

Name: https://wwws.clamav.net/bugzilla/show_bug.cgi?id=582

Hyperlink:https://wwws.clamav.net/bugzilla/show_bug.cgi?id=582

External Source: XF

Name: clamav-clihtmlnormalise-dos(36177)

Hyperlink:http://xforce.iss.net/xforce/xfdb/36177

External Source: XF

Name: clamav-rtf-dos(36173)

Hyperlink:http://xforce.iss.net/xforce/xfdb/36173

External Source: VUPEN

Name: ADV-2008-0924

Hyperlink:http://www.vupen.com/english/advisories/2008/0924/references

External Source: VUPEN

Name: ADV-2007-2952

Hyperlink:http://www.vupen.com/english/advisories/2007/2952

External Source: CONFIRM

Name: http://sourceforge.net/project/shownotes.php?release_id=533658

Hyperlink:http://sourceforge.net/project/shownotes.php?release_id=533658

External Source: CONFIRM

Name: http://kolab.org/security/kolab-vendor-notice-17.txt

Hyperlink:http://kolab.org/security/kolab-vendor-notice-17.txt

External Source: FEDORA

Name: FEDORA-2007-2050

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00104.html

External Source: TRUSTIX

Name: 2007-0026

Hyperlink:http://www.trustix.org/errata/2007/0026/

External Source: SUSE

Name: SUSE-SR:2007:018

Hyperlink:http://www.novell.com/linux/security/advisories/2007_18_sr.html

External Source: MANDRIVA

Name: MDKSA-2007:172

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:172

External Source: DEBIAN

Name: DSA-1366

Hyperlink:http://www.debian.org/security/2007/dsa-1366

External Source: SREASON

Name: 3054

Hyperlink:http://securityreason.com/securityalert/3054

External Source: GENTOO

Name: GLSA-200709-14

Hyperlink:http://security.gentoo.org/glsa/glsa-200709-14.xml

External Source: SECUNIA

Name: 29420

Hyperlink:http://secunia.com/advisories/29420

External Source: SECUNIA

Name: 26916

Hyperlink:http://secunia.com/advisories/26916

External Source: SECUNIA

Name: 26822

Hyperlink:http://secunia.com/advisories/26822

External Source: SECUNIA

Name: 26751

Hyperlink:http://secunia.com/advisories/26751

External Source: SECUNIA

Name: 26683

Hyperlink:http://secunia.com/advisories/26683

External Source: SECUNIA

Name: 26674

Hyperlink:http://secunia.com/advisories/26674

External Source: SECUNIA

Name: 26654

Hyperlink:http://secunia.com/advisories/26654

External Source: APPLE

Name: APPLE-SA-2008-03-18

Hyperlink:http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

External Source: CONFIRM

Name: http://docs.info.apple.com/article.html?artnum=307562

Hyperlink:http://docs.info.apple.com/article.html?artnum=307562