CVE-2007-4510

Publication date 23 August 2007

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service (application crash) via (1) a crafted RTF file, which triggers a NULL dereference in the cli_scanrtf function in libclamav/rtf.c; or (2) a crafted HTML document with a data: URI, which triggers a NULL dereference in the cli_html_normalise function in libclamav/htmlnorm.c. NOTE: some of these details are obtained from third party information.

Status

Package Ubuntu Release Status
clamav 8.04 LTS hardy
Not affected
7.10 gutsy
Not affected
7.04 feisty
Fixed 0.90.2-0ubuntu1.4
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper
Fixed 0.92.1~dfsg2-1.1~dapper2