CVE-2007-6335

Exp

Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a crafted MEW packed PE file, which triggers a heap-based buffer overflow.

Published: 2007-12-20 Last update: 2026-04-23 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2007-6335 is rated High Exploit Risk (80.5/100): CVSS High severity, with high exploitation likelihood (EPSS 40.41%, 97th percentile). Core evidence: 1 public exploit reference(s) are indexed (Exploit-DB). EPSS rose +1.41% over the last day, indicating growing attacker interest. Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2007-6335

EDB-ID Source Kind Published Link
4862 exploit_db edb 2008-01-07 Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2007-6335

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-03-06 39.00% 40.41% +1.41%
2 2025-03-30 54.28% 39.00% -15.28%
3 2025-03-29 54.28%

Full EPSS history (11 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2007-6335

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
7.5 2.0 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:P)
Partial availability impact.
10.0 6.4 [email protected]

Weakness enumeration for CVE-2007-6335

OS Trackers for CVE-2007-6335

vendor priority summary link
debian not yet assigned CVE-2007-6335 not yet assigned priority: Debian including 1 source packages (clamav), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. https://security-tracker.debian.org/tracker/CVE-2007-6335
gentoo high CVE-2007-6335: 1 GLSA(s) (200712-20), 1 atom(s) (app-antivirus/clamav); latest impact high. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2007-6335
redhat critical https://access.redhat.com/security/cve/CVE-2007-6335
suse high CVE-2007-6335 severity important: SUSE including 17 source package names (clamav, clamav-0.103.3-1.4, …), 30 product×package rows across 20 product lines (SLES for SAP Applications 11 SP2, SUSE Linux Enterprise Desktop 12, … (20 product lines)): Fixed 16, Known Not Affected 14. https://www.suse.com/security/cve/CVE-2007-6335/
ubuntu medium CVE-2007-6335 medium priority: Ubuntu including 1 source packages (clamav), 6 status rows across 6 suites (dapper, edgy, feisty, gutsy, hardy, upstream): released 4, ignored 1, not-affected 1. https://ubuntu.com/security/CVE-2007-6335

Affected software / configurations for CVE-2007-6335

Vendor Product Version Raw CPE
clam_anti-virus clamav <= 0.92 cpe:2.3:a:clam_anti-virus:clamav:*:*:*:*:*:*:*:*

References for CVE-2007-6335

URL Tags
http://docs.info.apple.com/article.html?artnum=307562
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=634
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
http://secunia.com/advisories/28117 Vendor Advisory
http://secunia.com/advisories/28153
http://secunia.com/advisories/28176
http://secunia.com/advisories/28278
http://secunia.com/advisories/28412
http://secunia.com/advisories/28421
http://secunia.com/advisories/28587
http://secunia.com/advisories/29420
http://security.gentoo.org/glsa/glsa-200712-20.xml
http://www.debian.org/security/2007/dsa-1435
http://www.mandriva.com/security/advisories?name=MDVSA-2008:003
http://www.securityfocus.com/bid/26927
http://www.securitytracker.com/id?1019112
http://www.vupen.com/english/advisories/2007/4253
http://www.vupen.com/english/advisories/2008/0924/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/39119
https://www.exploit-db.com/exploits/4862
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00644.html
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00740.html
cvelogic Threat Intelligence