PT-2006-5003 · Cisco · Clamav

Damian Put · Published 2006-10-16 · Updated 2024-06-15 · CVE-2006-4182

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ClamAV versions 0.88.1 through 0.88.4 ClamAV versions prior to 0.88.5

Description The issue allows remote attackers to cause a denial of service and execute arbitrary code via a crafted Portable Executable file. This leads to a heap-based buffer overflow when less memory is allocated than expected.

Recommendations For ClamAV versions 0.88.1 through 0.88.4, update to version 0.88.5 or later. For ClamAV versions prior to 0.88.5, update to version 0.88.5 or later.

Exploit

Fix

Related Identifiers

CVE-2006-4182

DSA-1196-1

OPENSUSE-SU-2024:10685-1

Affected Products

Clamav

References · 86

• 🔥 https://exploit-db.com/exploits/2587 · Exploit
• http://debian.org/security/2006/dsa-1196 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-4182 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_60_clamav.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4182 · Security Note
• https://osv.dev/vulnerability/CVE-2006-4182 · Vendor Advisory
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=422 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200610-10.xml · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:184 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10685-1 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-4182 · Vendor Advisory
• https://suse.com/security/cve/CVE-2017-12374 · Note
• https://suse.com/security/cve/CVE-2007-0897 · Note
• https://suse.com/security/cve/CVE-2017-6419 · Note