Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2007-1745

EPSS 2.23% · P85
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2007-1745

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The chm_decompress_stream function in libclamav/chmunpack.c in Clam AntiVirus (ClamAV) before 0.90.2 leaks file descriptors, which has unknown impact and attack vectors involving a crafted CHM file, a different vulnerability than CVE-2007-0897. NOTE: some of these details are obtained from third party information.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Clam AntiVirus ClamAV 缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。 ClamAV libclamav库中的cab_unstore()函数中存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 此外，libclamav/chmunpack.c文件中的chm_decompress_stream函数还存在文件描述符泄露漏洞，可能导致泄露敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2007-1745

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2007-1745

Please Login to view more intelligence information

Same Patch Batch · n/a · 2007-04-16 · 26 CVEs total

CVE-2007-1997Clam AntiVirus ClamAV sizeof()权限提升漏洞
CVE-2007-2030LHA 'lharc.c' 权限许可和访问控制漏洞
CVE-2007-2041Cisco无线Lan控制器重启后WLAN ACL失效漏洞
CVE-2007-2040Cisco无线Lan控制器轻型AP中硬编码的服务口令安全漏洞
CVE-2007-2039Cisco无线Lan控制器NPU锁定漏洞
CVE-2007-2038Cisco无线Lan控制器NPU锁定漏洞
CVE-2007-2037Cisco无线Lan控制器多个安全漏洞
CVE-2007-2036Cisco无线Lan控制器默认SNMP团体字符串漏洞
CVE-2007-2035Cisco无线控制系统向未经认证用户泄露信息安全漏洞
CVE-2007-2034Cisco无线控制系统组帐号权限提升安全漏洞
CVE-2007-2033Cisco无线控制系统权限提升漏洞
CVE-2007-2032Cisco无线控制系统WCS位置备份固定的FTP凭据安全漏洞
CVE-2007-20313proxy HTTP代理请求缓冲区溢出漏洞
CVE-2007-1558APOP协议不安全MD5无用信息缺陷设计错误漏洞
CVE-2007-2052Python PyLocale_strxfrm函数远程信息泄露漏洞
CVE-2007-2051bftpd parsecmd函数缓冲区溢出漏洞
CVE-2007-2050RicarGBooK 'Header.PHP' 多个目录遍历漏洞
CVE-2007-2049Mambo 日历模块绝对路径多个远程文件包含漏洞
CVE-2007-2048webMethods Glue 'Console'目录遍历漏洞
CVE-2007-2047Openads 'ck.php' CRLF注入漏洞

Showing top 20 of 26 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2007-1745

No comments yet

Leave a comment