CVE-2006-4182

2006-10-1600:00:00

ubuntu.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.367 Low

EPSS

Percentile

97.1%

JSON

Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before
0.88.5, allows remote attackers to cause a denial of service (scanning
service crash) and execute arbitrary code via a crafted Portable Executable
(PE) file that leads to a heap-based buffer overflow when less memory is
allocated than expected.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchclamav< 0.88.2-1ubuntu1.3UNKNOWN
ubuntu6.10noarchclamav< 0.88.4-1ubuntu2.1UNKNOWN
ubuntu7.04noarchclamav< 0.90.2-0ubuntu1.3UNKNOWN