Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2007-2650 Details

Description

The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) via an OLE2 file with (1) a large property size or (2) a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://article.gmane.org/gmane.comp.security.virus.clamav.devel/2853	CVE	Broken Link
http://kolab.org/security/kolab-vendor-notice-15.txt	CVE	Broken Link
http://lurker.clamav.net/message/20070418.111144.0df6c5d3.en.html	CVE	Broken Link
http://secunia.com/advisories/25244	CVE	PatchThird Party Advisory
http://secunia.com/advisories/25523	CVE	Third Party Advisory
http://secunia.com/advisories/25525	CVE	Third Party Advisory
http://secunia.com/advisories/25553	CVE	Third Party Advisory
http://secunia.com/advisories/25558	CVE	Third Party Advisory
http://secunia.com/advisories/25688	CVE	Third Party Advisory
http://secunia.com/advisories/25796	CVE	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200706-05.xml	CVE	Third Party Advisory
http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog	CVE	Broken Link
http://www.debian.org/security/2007/dsa-1320	CVE	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:115	CVE	Third Party Advisory
http://www.novell.com/linux/security/advisories/2007_33_clamav.html	CVE	Third Party Advisory
http://www.securityfocus.com/bid/24316	CVE	Third Party AdvisoryVDB Entry
http://www.trustix.org/errata/2007/0020/	CVE	Broken Link
http://www.vupen.com/english/advisories/2007/1776	CVE	Permissions Required
http://article.gmane.org/gmane.comp.security.virus.clamav.devel/2853	[email protected]	Broken Link
http://kolab.org/security/kolab-vendor-notice-15.txt	[email protected]	Broken Link
http://lurker.clamav.net/message/20070418.111144.0df6c5d3.en.html	[email protected]	Broken Link
http://secunia.com/advisories/25244	[email protected]	PatchThird Party Advisory
http://secunia.com/advisories/25523	[email protected]	Third Party Advisory
http://secunia.com/advisories/25525	[email protected]	Third Party Advisory
http://secunia.com/advisories/25553	[email protected]	Third Party Advisory
http://secunia.com/advisories/25558	[email protected]	Third Party Advisory
http://secunia.com/advisories/25688	[email protected]	Third Party Advisory
http://secunia.com/advisories/25796	[email protected]	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200706-05.xml	[email protected]	Third Party Advisory
http://svn.clamav.net/svn/clamav-devel/trunk/ChangeLog	[email protected]	Broken Link
http://www.debian.org/security/2007/dsa-1320	[email protected]	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:115	[email protected]	Third Party Advisory
http://www.novell.com/linux/security/advisories/2007_33_clamav.html	[email protected]	Third Party Advisory
http://www.securityfocus.com/bid/24316	[email protected]	Third Party AdvisoryVDB Entry
http://www.trustix.org/errata/2007/0020/	[email protected]	Broken Link
http://www.vupen.com/english/advisories/2007/1776	[email protected]	Permissions Required

see all 36 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-400	Uncontrolled Resource Consumption	[email protected]

Affected Products

Product	Versions
clamav clamav	< 0.90.3
CPE cpe:2.3:a:clamav:clamav:::::::: Remediation No remediation found in references.
debian debian linux	3.1 4.0
CPE cpe:2.3:o:debian:debian_linux:3.1:::::::* cpe:2.3:o:debian:debian_linux:4.0:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 23, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Nov 9, 2020	Modified Analysis	[email protected]
May 16, 2007	Initial Analysis	[email protected]