CVE-2007-0898: Clam Anti-Virus Clamav

Medium severity, CVSS 6.4. EPSS: 3.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in clamd in Clam AntiVirus ClamAV before 0.90 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the id MIME header parameter in a multi-part message.

Affected products

• Clam Anti-Virus Clamav: up to and including 0.88.6; version 0.15 only; version 0.20 only; version 0.21 only; version 0.22 only; version 0.23 only; …

Published 2007-02-16. Last modified 2026-06-16.