Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2006-4018
HistoryAug 08, 2006 - 8:04 p.m.

CVE-2006-4018

2006-08-0820:04:00
CWE-119
[email protected]
web.nvd.nist.gov
109
cve-2006-4018
buffer overflow
clam antivirus
clamav
upx
remote code execution
security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.875 High

EPSS

Percentile

98.7%

JSON

Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values.

Affected configurations

NVD
Node
clamavclamavMatch0.81
OR
clamavclamavMatch0.81rc1
OR
clamavclamavMatch0.82
OR
clamavclamavMatch0.83
OR
clamavclamavMatch0.84
OR
clamavclamavMatch0.84rc1
OR
clamavclamavMatch0.84rc2
OR
clamavclamavMatch0.85
OR
clamavclamavMatch0.85.1
OR
clamavclamavMatch0.86
OR
clamavclamavMatch0.86rc1
OR
clamavclamavMatch0.86.1
OR
clamavclamavMatch0.86.2
OR
clamavclamavMatch0.87
OR
clamavclamavMatch0.87.1
OR
clamavclamavMatch0.88
OR
clamavclamavMatch0.88.1
OR
clamavclamavMatch0.88.2
OR
clamavclamavMatch0.88.3

References

Related

gentoo 1
openvas 6
debian 1
debiancve 1
cvelist 2
ubuntucve 1
freebsd 1
checkpoint_advisories 2
suse 1
nessus 4
altlinux 3
nvd 2
f5 2
cve 1
gentoo
gentoo
ClamAV: Heap buffer overflow
2006-08-08 00:00:00
openvas
openvas
Debian Security Advisory DSA 1153-1 (clamav)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200608-13 (clamav)
2008-09-24 00:00:00
FreeBSD Ports: clamav
2008-09-04 00:00:00
debian
debian
[SECURITY] [DSA 1153-1] New ClamAV packages fix arbitrary code execution
2006-08-18 17:39:44
debiancve
debiancve
CVE-2006-4018
2006-08-08 20:04:00
cvelist
cvelist
CVE-2006-4018
2006-08-08 20:00:00
CVE-2006-4613
2006-09-07 00:00:00
ubuntucve
ubuntucve
CVE-2006-4018
2006-08-08 00:00:00
freebsd
freebsd
clamav -- heap overflow vulnerability
2006-08-07 00:00:00
checkpoint_advisories
checkpoint_advisories
ClamAV UPX File Handling Heap Code Execution (CVE-2006-4018)
2013-01-07 00:00:00
ClamAV UPX File Handling Heap Overflow (CVE-2006-4018)
2010-07-27 00:00:00
suse
suse
remote code execution in clamav
2006-08-09 14:48:55
nessus
nessus
Mandrake Linux Security Advisory : clamav (MDKSA-2006:138)
2006-12-16 00:00:00
GLSA-200608-13 : ClamAV: Heap buffer overflow
2006-08-10 00:00:00
Debian DSA-1153-1 : clamav - buffer overflow
2006-10-14 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package clamav version 0.88.4-alt1
2006-08-10 00:00:00
Security fix for the ALT Linux 9 package clamav version 0.88.4-alt1
2006-08-10 00:00:00
Security fix for the ALT Linux 10 package clamav version 0.88.4-alt1
2006-08-10 00:00:00
nvd
nvd
CVE-2006-4018
2006-08-08 20:04:00
CVE-2006-4613
2006-09-07 00:04:00
f5
f5
SOL6806 - ClamAV UPX heap overflow Vulnerability - CVE-2006-4018
2007-01-10 00:00:00
K6806 : ClamAV UPX heap overflow Vulnerability - CVE-2006-4018
2013-03-27 00:00:00
cve
cve
CVE-2006-4613
2006-09-07 00:04:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.875 High

EPSS

Percentile

98.7%

JSON
Related for CVE-2006-4018
gentoo1openvas6debian1debiancve1cvelist2ubuntucve1freebsd1checkpoint_advisories2suse1nessus4altlinux3nvd2f52cve1