CVE-2007-1745
Fixed in a distro release EPSS 2%
The chm_decompress_stream function in libclamav/chmunpack.c in Clam AntiVirus (ClamAV) before 0.90.2 leaks file descriptors, which has unknown impact and attack vectors involving a crafted CHM file, a different vulnerability than CVE-2007-0897. NOTE: some of these details are obtained from third party information.
Products: clam_anti-virus clamav, ifenslave
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | clamav | 0.90.2-1 |
| Debian 13 | clamav | 0.90.2-1 |
| Debian 14 | clamav | 0.90.2-1 |
| Debian 3.1 | clamav | 0.84-2.sarge.16 |
| Debian 4.0 | clamav | 0.90.1-3etch1 |
| Debian 5.0 | clamav | 0.90.1-3lenny2 |
| openSUSE Tumbleweed | clamav | 0.103.3-1.4 |