CVE - CVE-2007-2650

CVE-ID
CVE-2007-2650	Learn more at National Vulnerability Database (NVD) • Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) via an OLE2 file with (1) a large property size or (2) a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MLIST:[clamav-devel] 20070418 Bug in OLE2 file parser URL:http://lurker.clamav.net/message/20070418.111144.0df6c5d3.en.html MISC:http://article.gmane.org/gmane.comp.security.virus.clamav.devel/2853 CONFIRM:http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog CONFIRM:http://kolab.org/security/kolab-vendor-notice-15.txt DEBIAN:DSA-1320 URL:http://www.debian.org/security/2007/dsa-1320 GENTOO:GLSA-200706-05 URL:http://security.gentoo.org/glsa/glsa-200706-05.xml MANDRIVA:MDKSA-2007:115 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:115 SUSE:SUSE-SA:2007:033 URL:http://www.novell.com/linux/security/advisories/2007_33_clamav.html TRUSTIX:2007-0020 URL:http://www.trustix.org/errata/2007/0020/ BID:24316 URL:http://www.securityfocus.com/bid/24316 VUPEN:ADV-2007-1776 URL:http://www.vupen.com/english/advisories/2007/1776 SECUNIA:25244 URL:http://secunia.com/advisories/25244 SECUNIA:25553 URL:http://secunia.com/advisories/25553 SECUNIA:25523 URL:http://secunia.com/advisories/25523 SECUNIA:25525 URL:http://secunia.com/advisories/25525 SECUNIA:25558 URL:http://secunia.com/advisories/25558 SECUNIA:25688 URL:http://secunia.com/advisories/25688 SECUNIA:25796 URL:http://secunia.com/advisories/25796
Assigning CNA
N/A
Date Entry Created
20070514	Disclaimer: The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20070514)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE list, which standardizes names for security problems.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org