CVE-2007-6745

CriticalCVSS 9.8/10Last modified Jun 16, 2026

Description

clamav 0.91.2 suffers from a floating point exception when using ScanOLE2.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Nov 7, 2019
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2007

CVE-2007-67465.8telepathy-idle before 0.1.15 does not verify (1) that the issuer is a trusted CA, (2) that the server hostname matches a domain name in the CVE-2007-67505.0The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonsCVE-2007-67514.3Cross-site scripting (XSS) vulnerability in the MailForm plugin before 1.20 for Movable Type allows remote attackers to inject arbitrary webCVE-2007-67526.8Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitraryCVE-2007-67536.2Untrusted search path vulnerability in Shell32.dll in Microsoft Windows 2000, Windows XP, Windows Vista, Windows Server 2008, and Windows 7,CVE-2007-67545.0The ipalloc function in libc/stdlib/malloc.c in jemalloc in libc for FreeBSD 6.4 and NetBSD does not properly allocate memory, which makes iCVE-2007-67555.8The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains pointCVE-2007-67564.9ZOLL Defibrillator / Monitor M Series, E Series, and R Series have a default password for System Configuration mode, which allows physicallyCVE-2007-675710.0GE Healthcare Centricity DMS 4.2, 4.1, and 4.0 has a password of Muse!Admin for the Museadmin user, which has unspecified impact and attack CVE-2007-67587.5Server-side request forgery (SSRF) vulnerability in feed-proxy.php in extjs 5.0.0.CVE-2007-67599.8Dataprobe iBootBar (with 2007-09-20 and possibly later released firmware) allows remote attackers to bypass authentication, and conduct poweCVE-2007-67609.8Dataprobe iBootBar (with 2007-09-20 and possibly later beta firmware) allows remote attackers to bypass authentication, and conduct power-cy
CVE-2007-6745: Critical severity, CVSS 9.8 | Vulnix