CVE-2007-6335

CVE-2007-6335 describes an integer overflow vulnerability in the libclamav component of ClamAV versions prior to 0.92. This flaw allows remote attackers to execute arbitrary code by supplying a specially crafted MEW packed PE file, which then triggers a heap-based buffer overflow. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit for this vulnerability (EDB-4862) is publicly available on ExploitDB, though there is no evidence of widespread active exploitation or significant community discussion.