VULNERABILITY INTELLIGENCE
CVE-2007-6029
CVSS score7.5 HIGH
EPSS probability2.59%
CISA KEVNot currently listed
Published2007-11-20
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute arbitrary code via a crafted e-mail message. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')