CVE-2007-4560

clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to...

7.6 HighPublic exploitFix available

clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail."

Exploit likelihood

83.5%Up 3.1 points since Feb 4, 2022

What each source reports

NVD Score used 7.6

Record: CVE-2007-4560
CVSS 2.0: 7.6 HighAV:N/AC:H/Au:N/C:C/I:C/A:C
Weakness: CWE-78
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-4560
Updated: 2026-11-02

EUVDEUVD-2007-4542 No score

Record: EUVD-2007-4542
Updated: 2026-11-03

GitHub AdvisoriesGHSA-86rv-pvv7-jwp8 No score

clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to...

Record: GHSA-86rv-pvv7-jwp8
Weakness: CWE-78
Updated: 2026-11-02

OSV No score

Record: CVE-2007-4560
Updated: 2026-11-02

OSVDEBIAN-CVE-2007-4560 No score

Record: DEBIAN-CVE-2007-4560
Updated: 2026-11-02

Affected products

clam anti-virus clamav

Affected packages

Affected packages
Package	Affected	Fixed
`clamav` Debian:12	before 0.91.2-1~volatile1	0.91.2-1~volatile1
`clamav` Debian:13	before 0.91.2-1~volatile1	0.91.2-1~volatile1
`clamav` Debian:14	before 0.91.2-1~volatile1	0.91.2-1~volatile1
`clamav` Debian:4.0 From an advisory covering 2 CVEs	before 0.90.1-3etch7, plus listed versions 0.90.1-20.90.1-3etch10.90.1-3etch20.90.1-3etch30.90.1-3etch40.90.1-3etch50.90.1-3etch6	0.90.1-3etch7

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	ClamAV Milter 0.92.2 - Blackhole-Mode (Sendmail) Code Execution (Metasploit)	2007-08-24
Metasploit	ClamAV Milter Blackhole-Mode Remote Code Execution	2007-08-24
Exploit-DB	Sendmail with clamav-milter < 0.91.2 - Remote Command Execution	2007-12-21
Exploit-DB	ClamAV Milter - Blackhole-Mode Remote Code Execution (Metasploit)	2010-10-09
PoC in GitHub	0x1sac/ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution	2022-12-31
PoC in GitHub	Strikoder-Premium/sendmail-clamav-exploit-CVE-2007-4560	2025-12-07

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, exploits, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	aliases
Nov 2, 2026	affected, aliases, exploits, facts, references, title	Exploit-DB, GitHub Advisories, Metasploit, OSV, PoC in GitHub
Nov 2, 2026	first indexed	CVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-4560 is a high vulnerability (CVSS 7.6) in Clam Anti-virus Clamav, published August 28, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 83.5%, the 99th percentile. Fixed in clamav 0.91.2-1~volatile1.

References

Show 18 moreShow less