CVE-2006-4182
NoneCVSS
—
EPSS
21.4%
Published
Oct 16, 2006
CISA due date
—
The record
Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning service crash) and execute arbitrary code via a crafted Portable Executable (PE) file that leads to a heap-based buffer overflow when less memory is allocated than expected.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | clamav | 0 | 0.88.5-1 |
| Debian:11 | clamav | 0 | 0.88.5-1 |
| Debian:12 | clamav | 0 | 0.88.5-1 |
| Debian:13 | clamav | 0 | 0.88.5-1 |
| Debian:3.1 | clamav | 0 | 0.84-2.sarge.11 |
| openSUSE:Tumbleweed | clamav | 0 | 0.103.3-1.4 |
Related vulnerabilities
- CVE-2023-20032 On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was… Also affects clamav
- CVE-2012-1457 The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Also affects clamav
- CVE-2012-1459 The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir… Also affects clamav
- CVE-2012-1458 The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote… Also affects clamav
- CVE-2012-1419 The TAR file parser in ClamAV 0.96.4 and Quick Heal (aka Cat QuickHeal) 11.00 allows… Also affects clamav
- CVE-2007-4560 clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote… Also affects clamav
- CVE-2006-5295 Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a… Also affects clamav
- CVE-2006-4018 Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus… Also affects clamav