CVE:CVE-2007-0897
CNNVD:CNNVD-200702-342
Clam AntiVirus是Unix的GPL杀毒工具包，很多邮件网关产品都在使用。
ClamAV处理畸形CAB文件时存在漏洞，远程攻击者可能利用此漏洞对ClamAV执行拒绝服务攻击。
ClamAV在处理CAB文件时，如果遇到记录长度为0的cabinet头，ClamAV就会在未关闭本地文件描述符的情况下便从函数返回。攻击者可以多次触发这个漏洞，最终导致用尽几乎所有可用的文件描述符，ClamAV无法扫描大多数文档，包括zip和tar文件，从而降低扫描服务的功能。
solution:Upgrade clam_anti-virus clamav to a higher version than 0.15,0.20,0.21,0.22,0.23,0.24,0.51,0.52,0.53,0.54,0.60,0.60p,0.65,0.67,0.68,0.68.1,0.70,0.71,0.72,0.73,0.74,0.75,0.75.1,0.80,0.80_rc1,0.80_rc2,0.80_rc3,0.80_rc4,0.81,0.81_rc1,0.82,0.83,0.84,0.84_rc1,0.84_rc2,0.85,0.85.1,0.86,0.86.1,0.86.2,0.86_rc1,0.87,0.87.1,0.88,0.88.1,0.88.3,0.88.4,0.88.6,and avoid the version (,0.15],(,0.20],(,0.21],(,0.22],(,0.23],(,0.24],(,0.51],(,0.52],(,0.53],(,0.54],(,0.60],(,0.60p],(,0.65],(,0.67],(,0.68],(,0.68.1],(,0.70],(,0.71],(,0.72],(,0.73],(,0.74],(,0.75],(,0.75.1],(,0.80],(,0.80_rc1],(,0.80_rc2],(,0.80_rc3],(,0.80_rc4],(,0.81],(,0.81_rc1],(,0.82],(,0.83],(,0.84],(,0.84_rc1],(,0.84_rc2],(,0.85],(,0.85.1],(,0.86],(,0.86.1],(,0.86.2],(,0.86_rc1],(,0.87],(,0.87.1],(,0.88],(,0.88.1],(,0.88.3],(,0.88.4],(,0.88.6]