CVE-2007-6596
ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass...
ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file.
Exploit likelihood
What each source reports
NVD Score used
5.0
ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file.
- Record
CVE-2007-6596- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file.
- Record
CVE-2007-6596- Updated
- 2026-11-02
EUVDEUVD-2007-6562 No score
ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file.
- Record
EUVD-2007-6562- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m5g7-g5cj-mjrh No score
ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass...
ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file.
- Record
GHSA-m5g7-g5cj-mjrh- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file.
- Record
CVE-2007-6596- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-6596 No score
ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file.
- Record
DEBIAN-CVE-2007-6596- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10685-1 No score
clamav-0.103.3-1.4 on GA media
These are all security issues fixed in the clamav-0.103.3-1.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10685-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-6596 is a medium vulnerability (CVSS 5.0) in Clam Anti-virus Clamav, published December 31, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.33%, the 83rd percentile. Fixed in clamav 0.92.1~dfsg-1.
References
securityreason.com/securityalert/3501
secunia.com/advisories/29891
exchange.xforce.ibmcloud.com/vulnerabilities/39337
securityfocus.com/bid/27064
securitytracker.com/id?1019148
lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html
Show 59 moreShow less
securityfocus.com/archive/1/485631/100/0/threaded
nvd.nist.gov/vuln/detail/CVE-2007-6596
github.com/advisories/GHSA-m5g7-g5cj-mjrh
security-tracker.debian.org/tracker/CVE-2007-6596
suse.com/security/cve/CVE-2005-3239
suse.com/security/cve/CVE-2005-3303
suse.com/security/cve/CVE-2006-1614
suse.com/security/cve/CVE-2006-1989
suse.com/security/cve/CVE-2006-4182
suse.com/security/cve/CVE-2006-5874
suse.com/security/cve/CVE-2007-0897
suse.com/security/cve/CVE-2007-0898
suse.com/security/cve/CVE-2007-1745
suse.com/security/cve/CVE-2007-1997
suse.com/security/cve/CVE-2007-6335
suse.com/security/cve/CVE-2007-6336
suse.com/security/cve/CVE-2007-6337
suse.com/security/cve/CVE-2007-6595
suse.com/security/cve/CVE-2007-6596
suse.com/security/cve/CVE-2008-0318
suse.com/security/cve/CVE-2008-0728
suse.com/security/cve/CVE-2008-1100
suse.com/security/cve/CVE-2008-2713
suse.com/security/cve/CVE-2010-1205
suse.com/security/cve/CVE-2012-6706
suse.com/security/cve/CVE-2017-11423
suse.com/security/cve/CVE-2017-12374
suse.com/security/cve/CVE-2017-12375
suse.com/security/cve/CVE-2017-12376
suse.com/security/cve/CVE-2017-12377
suse.com/security/cve/CVE-2017-12378
suse.com/security/cve/CVE-2017-12379
suse.com/security/cve/CVE-2017-12380
suse.com/security/cve/CVE-2017-6418
suse.com/security/cve/CVE-2017-6419
suse.com/security/cve/CVE-2017-6420
suse.com/security/cve/CVE-2018-0202
suse.com/security/cve/CVE-2018-0360
suse.com/security/cve/CVE-2018-0361
suse.com/security/cve/CVE-2018-1000085
suse.com/security/cve/CVE-2018-14680
suse.com/security/cve/CVE-2018-15378
suse.com/security/cve/CVE-2019-12625
suse.com/security/cve/CVE-2019-12900
suse.com/security/cve/CVE-2019-15961
suse.com/security/cve/CVE-2019-1785
suse.com/security/cve/CVE-2019-1786
suse.com/security/cve/CVE-2019-1787
suse.com/security/cve/CVE-2019-1788
suse.com/security/cve/CVE-2019-1789
suse.com/security/cve/CVE-2019-1798
suse.com/security/cve/CVE-2020-3123
suse.com/security/cve/CVE-2020-3327
suse.com/security/cve/CVE-2020-3341
suse.com/security/cve/CVE-2020-3350
suse.com/security/cve/CVE-2020-3481
suse.com/security/cve/CVE-2021-1252
suse.com/security/cve/CVE-2021-1404
suse.com/security/cve/CVE-2021-1405