CVE-2007-1745

Properties

Published:
15.04.2007
Updated:
30.11.2010
Patch available:
Severity:
High
CVSS vector:
(AV:N/AC:M/Au:N/C:N/I:N/A:C)
Product:
ifenslave: ifenslave

Vulnerability description

The chm_decompress_stream function in libclamav/chmunpack.c in Clam AntiVirus (ClamAV) before 0.90.2 leaks file descriptors, which has unknown impact and attack vectors involving a crafted CHM file, a different vulnerability than CVE-2007-0897.  NOTE: some of these details are obtained from third party information.

References:

VUPEN: http://www.frsirt.com/english/advisories/2007/1378
XF: http://xforce.iss.net/xforce/xfdb/33636
BID: http://www.securityfocus.com/bid/23473
CONFIRM: http://sourceforge.net/project/shownotes.php?release_id=500765
SECUNIA: http://secunia.com/advisories/24891
OSVDB: http://osvdb.org/34913
TRUSTIX: http://www.trustix.org/errata/2007/0013/
SUSE: http://www.novell.com/linux/security/advisories/2007_26_clamav.html
MANDRIVA: http://www.mandriva.com/security/advisories?name=MDKSA-2007:098
VUPEN: http://www.frsirt.com/english/advisories/2008/0924/references
DEBIAN: http://www.debian.org/security/2007/dsa-1281
CONFIRM: http://support.novell.com/techcenter/psdb/50a5cb718f20761dd7e0b6b4e0935c52.html
GENTOO: http://security.gentoo.org/glsa/glsa-200704-21.xml
SECUNIA: http://secunia.com/advisories/29420
SECUNIA: http://secunia.com/advisories/25189
SECUNIA: http://secunia.com/advisories/25028
SECUNIA: http://secunia.com/advisories/25022
SECUNIA: http://secunia.com/advisories/24996
SECUNIA: http://secunia.com/advisories/24946
SECUNIA: http://secunia.com/advisories/24920
APPLE: http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
CONFIRM: http://docs.info.apple.com/article.html?artnum=307562