CVE ID:	CVE-2007-4510
Description:	ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service (application crash) via (1) a crafted RTF file, which triggers a NULL dereference in the cli_scanrtf function in libclamav/rtf.c; or (2) a crafted HTML document with a data: URI, which triggers a NULL dereference in the cli_html_normalise function in libclamav/htmlnorm.c. NOTE: some of these details are obtained from third party information.
Test IDs:	1.3.6.1.4.1.25623.1.0.59793   1.3.6.1.4.1.25623.1.0.861537   1.3.6.1.4.1.25623.1.0.58583   1.3.6.1.4.1.25623.1.0.58795
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-4510 http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html BugTraq ID: 25398 http://www.securityfocus.com/bid/25398 Debian Security Information: DSA-1366 (Google Search) http://www.debian.org/security/2007/dsa-1366 https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00104.html http://security.gentoo.org/glsa/glsa-200709-14.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:172 http://secunia.com/advisories/26530 http://secunia.com/advisories/26552 http://secunia.com/advisories/26654 http://secunia.com/advisories/26674 http://secunia.com/advisories/26683 http://secunia.com/advisories/26751 http://secunia.com/advisories/26822 http://secunia.com/advisories/26916 http://secunia.com/advisories/29420 http://securityreason.com/securityalert/3054 SuSE Security Announcement: SUSE-SR:2007:018 (Google Search) http://www.novell.com/linux/security/advisories/2007_18_sr.html http://www.trustix.org/errata/2007/0026/ http://www.vupen.com/english/advisories/2007/2952 http://www.vupen.com/english/advisories/2008/0924/references XForce ISS Database: clamav-clihtmlnormalise-dos(36177) https://exchange.xforce.ibmcloud.com/vulnerabilities/36177 XForce ISS Database: clamav-rtf-dos(36173) https://exchange.xforce.ibmcloud.com/vulnerabilities/36173