CVE-2007-6595 describes a local file overwrite vulnerability in ClamAV version 0.92, specifically affecting temporary files used by cli_gentempfd and .ascii files used by sigtool when utf16-decode is enabled. This flaw, categorized as a symlink attack (CWE-59), allows a local attacker to overwrite arbitrary files on the system. With a CVSS score of 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N), the vulnerability has low complexity and requires local access, resulting in a potential impact of partial integrity compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
0.92CPE matchmatch criteria | cpe:2.3:a:clam_anti-virus:clamav:0.92:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:N/I:P/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.6 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.