CVE-2007-3025: Unspecified vulnerability in libclamav/phishcheck.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1, when r...

Security readout for executives and security teams

This is an old ClamAV denial-of-service issue affecting vulnerable Solaris deployments. A remote attacker could make the antivirus engine hang while processing certain URL/phishing checks. The main business impact is loss or delay of mail or file scanning, not confirmed data theft or code execution. Exposure is likely limited to Solaris systems running the affected ClamAV versions and scanning attacker-supplied content, such as email or downloaded files. Non-Solaris deployments are not identified as affected in the provided sources. Treat this as a targeted operational resilience issue. It is not supported as data compromise or remote code execution, but vulnerable scanners can fail open or delay security processing if they hang. Mitigation focus: Upgrade affected ClamAV versions to 0.90.3, 0.91rc1, or later supported releases.; Prioritize Solaris hosts that scan untrusted email, web, or file content.; Check vendor or distribution guidance for backported fixes on legacy systems..

Prepared

Jun 29, 2026, 05:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.