CVE-2007-6595

Publication date 31 December 2007

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary files used by the cli_gentempfd function in libclamav/others.c or on (2) .ascii files used by sigtool, when utf16-decode is enabled.

Status

Package Ubuntu Release Status
clamav 7.10 gutsy
Fixed 0.91.2-3ubuntu2.3
7.04 feisty
Fixed 0.90.2-0ubuntu1.6
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper
Fixed 0.92~dfsg-2~dapper1ubuntu0.1