CVE-2007-6596
ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass...
CVE-2007-6596 is a medium vulnerability (CVSS 5.0) in Clam Anti-virus Clamav, published December 31, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.33%, the 83rd percentile. Fixed in clamav 0.92.1~dfsg-1.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 2.33%EPSS, 83rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.92.1~dfsg-1clamav +3 more
Description
ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file.
- Record
CVE-2007-6596- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file.
- Record
CVE-2007-6596- Updated
- 2026-11-02
EUVDEUVD-2007-6562No score
ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file.
- Record
EUVD-2007-6562- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m5g7-g5cj-mjrhNo score
ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass...
ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file.
- Record
GHSA-m5g7-g5cj-mjrh- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVNo score
ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file.
- Record
CVE-2007-6596- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-6596No score
ClamAV 0.92 does not recognize Base64 UUEncoded archives, which allows remote attackers to bypass the scanner via a Base64-UUEncoded file.
- Record
DEBIAN-CVE-2007-6596- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10685-1No score
clamav-0.103.3-1.4 on GA media
These are all security issues fixed in the clamav-0.103.3-1.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10685-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securityreason.com/securityalert/3501
secunia.com/advisories/29891
exchange.xforce.ibmcloud.com/vulnerabilities/39337
securityfocus.com/bid/27064
securitytracker.com/id?1019148
lists.opensuse.org/opensuse-security-announce/2008-04/msg00009.html
Show 59 moreShow less
nvd.nist.gov/vuln/detail/CVE-2007-6596
github.com/advisories/GHSA-m5g7-g5cj-mjrh
security-tracker.debian.org/tracker/CVE-2007-6596
suse.com/security/cve/CVE-2005-3239