CVE-2007-0897: Clam AntiVirus ClamAV before 0.90 does not close open file descriptors under certain conditions, which allo...

Security readout for executives and security teams

This is an old ClamAV denial-of-service issue. A specially malformed CAB archive can make affected ClamAV versions leak file descriptors, eventually causing scans to fail. The business risk is loss or degradation of antivirus scanning on systems that still run ClamAV before 0.90. Exposure is likely limited to legacy ClamAV deployments before 0.90, especially mail gateways, file-upload scanners, or archive-scanning services that process untrusted CAB files. Modern supported ClamAV installations are unlikely to be affected, but old OS packages and embedded appliances should be checked. Treat this as a legacy exposure cleanup item unless vulnerable ClamAV is still in a production scanning path. If found on mail or upload gateways, remediation should be prompt because scan failures can reduce malware detection coverage. Mitigation focus: Upgrade ClamAV to 0.90 or later, or the fixed vendor package.; Check relevant OS vendor advisories for supported backported fixes.; Prioritize internet-facing mail and file-upload scanning services..

Prepared

Jun 29, 2026, 07:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.