CVE-2007-3725: Clam Anti-Virus Clamav

Medium severity, CVSS 4.3. EPSS: 7.7% chance of exploitation in the next 30 days.

The RAR VM (unrarvm.c) in Clam Antivirus (ClamAV) before 0.91 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted RAR archive, resulting in a NULL pointer dereference.

Affected products

• Clam Anti-Virus Clamav: version 0.15 only; version 0.20 only; version 0.21 only; version 0.22 only; version 0.23 only; version 0.24 only; …

Published 2007-07-12. Last modified 2026-06-16.