Search for vulnerabilities
Vulnerability details: VCID-e43y-m8h5-aaac
Vulnerability ID VCID-e43y-m8h5-aaac
Aliases CVE-2007-3023
Summary unsp.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 does not properly calculate the end of a certain buffer, with unknown impact and remote attack vectors.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.01331 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.02743 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.02743 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.02743 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.02743 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.02743 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.02743 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.02743 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.02743 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.02743 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.02743 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.02743 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.02743 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.03445 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.03445 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.03445 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.03445 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
epss 0.03611 https://api.first.org/data/v1/epss?cve=CVE-2007-3023
cvssv2 10.0 https://nvd.nist.gov/vuln/detail/CVE-2007-3023
Reference id Reference type URL
http://kolab.org/security/kolab-vendor-notice-15.txt
http://lurker.clamav.net/message/20070530.224918.5c64abc4.en.html
http://osvdb.org/36908
https://api.first.org/data/v1/epss?cve=CVE-2007-3023
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3023
http://secunia.com/advisories/25523
http://secunia.com/advisories/25525
http://secunia.com/advisories/25688
http://secunia.com/advisories/25796
http://security.gentoo.org/glsa/glsa-200706-05.xml
http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog
https://wwws.clamav.net/bugzilla/show_bug.cgi?id=464
http://www.debian.org/security/2007/dsa-1320
http://www.novell.com/linux/security/advisories/2007_33_clamav.html
http://www.securityfocus.com/bid/24358
cpe:2.3:a:clam_anti-virus:clamav:0.90:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.90:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.90.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.90.1:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.90.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.90.2:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.90_rc1.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.90_rc1.1:*:*:*:*:*:*:*
cpe:2.3:a:clam_anti-virus:clamav:0.90_rc2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:clam_anti-virus:clamav:0.90_rc2:*:*:*:*:*:*:*
CVE-2007-3023 https://nvd.nist.gov/vuln/detail/CVE-2007-3023
GLSA-200706-05 https://security.gentoo.org/glsa/200706-05
No exploits are available.
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C Found at https://nvd.nist.gov/vuln/detail/CVE-2007-3023
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.78153
EPSS Score 0.01331
Published At March 28, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
There are no relevant records.