CVE-2007-6337: Unspecified vulnerability in the bzip2 decompression algorithm in nsis/bzlib_private.h in ClamAV before 0.9...

Security readout for executives and security teams

This CVE concerns an unspecified flaw in ClamAV's bzip2 decompression handling before version 0.92. Because ClamAV scans untrusted files, a remote sender could potentially trigger the issue by getting a malicious file scanned. The public record does not state the impact, so urgency depends on whether legacy ClamAV is still present. Exposure is most likely on legacy systems running ClamAV before 0.92, especially mail gateways, file-upload scanners, and endpoint or server antivirus jobs that inspect untrusted compressed files. Treat as a legacy exposure cleanup item unless ClamAV before 0.92 is found in active scanning paths. If present, remediate promptly because scanners handle untrusted content by design. Mitigation focus: Upgrade ClamAV to 0.92 or a vendor-supported fixed package.; Check distribution advisories for backported fixes before relying on version strings.; Prioritize scanners that process internet-originated email, uploads, or shared files..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.