CVE-2006-1615
NoneCVSS
—
EPSS
11.6%
Published
Apr 6, 2006
CISA due date
—
The record
Multiple format string vulnerabilities in the logging code in Clam AntiVirus (ClamAV) before 0.88.1 might allow remote attackers to execute arbitrary code. NOTE: as of 20060410, it is unclear whether this is a vulnerability, as there is some evidence that the arguments are actually being sanitized properly.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | clamav | 0 | 0.88.1-1 |
| Debian:12 | clamav | 0 | 0.88.1-1 |
| Debian:13 | clamav | 0 | 0.88.1-1 |
| Debian:3.1 | clamav | 0 | 0.84-2.sarge.8 |
Related vulnerabilities
- HSEC-2024-0002 out-of-bounds write when there are many bzip2 selectors Also affects clamav
- CVE-2023-20032 On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was… Also affects clamav
- CVE-2012-1457 The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Also affects clamav
- CVE-2012-1459 The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir… Also affects clamav
- CVE-2012-1458 The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote… Also affects clamav
- CVE-2012-1419 The TAR file parser in ClamAV 0.96.4 and Quick Heal (aka Cat QuickHeal) 11.00 allows… Also affects clamav
- CVE-2008-1100 Buffer overflow in the cli_scanpe function in libclamav (libclamav/pe.c) for ClamAV 0.92… Also affects clamav
- CVE-2007-6335 Integer overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute… Also affects clamav