First published: Tue Nov 20 2007(Updated: )
Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute arbitrary code via a crafted e-mail message. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
ClamAV | =0.91.2 | |
ClamAV | =0.91.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-6029 is classified as a critical vulnerability due to its potential to allow remote attackers to execute arbitrary code.
To mitigate CVE-2007-6029, users should upgrade to a version of ClamAV that is not affected, such as version 0.91.3 or later.
CVE-2007-6029 affects ClamAV versions 0.91.1 and 0.91.2.
Yes, CVE-2007-6029 can be exploited remotely through a crafted e-mail message.
CVE-2007-6029 enables remote code execution attacks.