CVE-2007-3725: Null Pointer Dereference
Published Jul 12, 2007
·Updated
The RAR VM (unrarvm.c) in Clam Antivirus (ClamAV) before 0.91 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted RAR archive, resulting in a NULL pointer dereference.
Affected Software
54 affected components
Clam Anti-Virus clamav=0.24
Clam Anti-Virus clamav=0.20
Clam Anti-Virus clamav=0.84
Clam Anti-Virus clamav=0.80
Clam Anti-Virus clamav=0.84_rc1
Clam Anti-Virus clamav=0.15
Clam Anti-Virus clamav=0.90
Clam Anti-Virus clamav=0.80_rc3
Clam Anti-Virus clamav=0.80_rc4
Clam Anti-Virus clamav=0.65
Clam Anti-Virus clamav=0.75
Clam Anti-Virus clamav=0.68
Clam Anti-Virus clamav=0.71
Clam Anti-Virus clamav=0.88.3
Clam Anti-Virus clamav=0.88.7
Clam Anti-Virus clamav=0.86.1
Clam Anti-Virus clamav=0.82
Clam Anti-Virus clamav=0.88.1
Clam Anti-Virus clamav=0.73
Clam Anti-Virus clamav=0.72
Clam Anti-Virus clamav=0.85.1
Clam Anti-Virus clamav=0.87
Clam Anti-Virus clamav=0.86_rc1
Clam Anti-Virus clamav=0.85
Clam Anti-Virus clamav=0.80_rc1
Clam Anti-Virus clamav=0.74
Clam Anti-Virus clamav=0.75.1
Clam Anti-Virus clamav=0.86.2
Clam Anti-Virus clamav=0.67
Clam Anti-Virus clamav=0.81
Clam Anti-Virus clamav=0.21
Clam Anti-Virus clamav=0.81_rc1
Clam Anti-Virus clamav=0.54
Clam Anti-Virus clamav=0.88.6
Clam Anti-Virus clamav=0.53
Clam Anti-Virus clamav=0.70
Clam Anti-Virus clamav=0.90_rc1.1
Clam Anti-Virus clamav=0.60p
Clam Anti-Virus clamav=0.90_rc2
Clam Anti-Virus clamav=0.90_rc3
Clam Anti-Virus clamav=0.80_rc2
Clam Anti-Virus clamav=0.88.5
Clam Anti-Virus clamav=0.60
Clam Anti-Virus clamav=0.86
Clam Anti-Virus clamav=0.83
Clam Anti-Virus clamav=0.68.1
Clam Anti-Virus clamav=0.88
Clam Anti-Virus clamav=0.87.1
Clam Anti-Virus clamav=0.88.4
Clam Anti-Virus clamav=0.84_rc2
Clam Anti-Virus clamav=0.51
Clam Anti-Virus clamav=0.23
Clam Anti-Virus clamav=0.52
Clam Anti-Virus clamav=0.22
Remediation
Patch Available
Event History
Jul 12, 2007
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-3725?
CVE-2007-3725 is classified as a denial of service vulnerability due to a NULL pointer dereference in Clam Antivirus.
2
How do I fix CVE-2007-3725?
To fix CVE-2007-3725, upgrade ClamAV to version 0.91 or later.
3
Which versions of ClamAV are affected by CVE-2007-3725?
CVE-2007-3725 affects ClamAV versions before 0.91, including 0.15 to 0.90.
4
What kind of attack can exploit CVE-2007-3725?
CVE-2007-3725 can be exploited by user-assisted remote attackers through crafted RAR archives.
5
What symptoms indicate an exploit of CVE-2007-3725?
Symptoms of an exploit of CVE-2007-3725 include crashes in ClamAV when processing specific RAR files.