Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

ClamAV may crash when scanning specially crafted RAR files

CVE-2007-3123 · published 19 years ago
Summary

The ClamAV antivirus program included in Debian can stop working if it scans a malicious RAR archive that contains a manipulated size value. This causes the program to crash and stop protecting the system. Upgrade ClamAV to the latest version to prevent the crash.

What to do
  • Update debian clamav to version 0.90.3-1.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian clamav < 0.90.3-1
Fix: upgrade to 0.90.3-1
Debian:13 debian clamav < 0.90.3-1
Fix: upgrade to 0.90.3-1
Debian:14 debian clamav < 0.90.3-1
Fix: upgrade to 0.90.3-1
– clam_anti-virus clamav 0.90
0.90.1
0.90.2
0.90_rc1.1
0.90_rc2
0.90_rc3
cpe:2.3:a:clam_anti-virus:clamav:0.90:*:*:*:*:*:*:*
Original advisory text
unrar.c in libclamav in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to cause a denial of service (core dump) via a crafted RAR file with a modified vm_codesize value, which...
unrar.c in libclamav in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to cause a denial of service (core dump) via a crafted RAR file with a modified vm_codesize value, which triggers a heap-based buffer overflow.
References
Severity
5.0 Medium
Exploitation
3% chance of attack within 30 days
Timeline
Published7 Jun 2007
Updated29 Oct 2026
First seen28 Sep 2026
Sources
DEBIAN-CVE-2007-3123 · OSV
CVE-2007-3123 · NVD
Track software like this
Free during beta