Lucene search
SuseSUSE-SA:2006:046HistoryAug 09, 2006 - 2:48 p.m.
remote code execution in clamav
2006-08-0914:48:55
lists.opensuse.org
10
0.875 High
EPSS
Percentile
98.7%
Damian Put discovered a bug in the UPX decoder used for scanning UPX compressed Windows executables. The bug allows for a heap buffer overflow and may potentially be exploitable to execute arbitrary code. ClamAV has been version updated to version 0.88.4 in order to fix this problem.
Solution
There is no known workaround, please install the update packages.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| SUSE Linux Enterprise Server | 10 | i586 | clamav | < 0.88.4-0.2 | clamav-0.88.4-0.2.i586.rpm |
| openSUSE | 10.1 | x86_64 | clamav | < 0.88.4-0.2 | clamav-0.88.4-0.2.x86_64.rpm |
| SUSE Linux Enterprise Server | 10 | ia64 | clamav | < 0.88.4-0.2 | clamav-0.88.4-0.2.ia64.rpm |
| SUSE Linux Enterprise Server | 10 | x86_64 | clamav | < 0.88.6-1.4 | clamav-0.88.6-1.4.x86_64.rpm |
| openSUSE | 10.0 | x86_64 | clamav | < 0.88.4-0.1 | clamav-0.88.4-0.1.x86_64.rpm |
| SUSE Linux Enterprise Server | 10 | x86_64 | clamav | < 0.88.4-0.2 | clamav-0.88.4-0.2.x86_64.rpm |
| SUSE Linux Enterprise Server | 10 | i586 | clamav | < 0.88.6-1.4 | clamav-0.88.6-1.4.i586.rpm |
| SUSE Linux Enterprise Server | 10 | s390x | clamav | < 0.88.6-1.4 | clamav-0.88.6-1.4.s390x.rpm |
| openSUSE | 9.2 | i586 | clamav | < 0.88.4-0.1 | clamav-0.88.4-0.1.i586.rpm |
| SUSE Linux Enterprise Server | 10 | ia64 | clamav | < 0.88.6-1.4 | clamav-0.88.6-1.4.ia64.rpm |
Related
gentoo
gentoo
ClamAV: Heap buffer overflow
2006-08-08 00:00:00
openvas
openvas
Debian Security Advisory DSA 1153-1 (clamav)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200608-13 (clamav)
2008-09-24 00:00:00
FreeBSD Ports: clamav
2008-09-04 00:00:00
debian
debian
[SECURITY] [DSA 1153-1] New ClamAV packages fix arbitrary code execution
2006-08-18 17:39:44
debiancve
debiancve
CVE-2006-4018
2006-08-08 20:04:00
cvelist
cvelist
CVE-2006-4018
2006-08-08 20:00:00
CVE-2006-4613
2006-09-07 00:00:00
ubuntucve
ubuntucve
CVE-2006-4018
2006-08-08 00:00:00
nessus
nessus
Debian DSA-1153-1 : clamav - buffer overflow
2006-10-14 00:00:00
Mandrake Linux Security Advisory : clamav (MDKSA-2006:138)
2006-12-16 00:00:00
GLSA-200608-13 : ClamAV: Heap buffer overflow
2006-08-10 00:00:00
checkpoint_advisories
checkpoint_advisories
ClamAV UPX File Handling Heap Overflow (CVE-2006-4018)
2010-07-27 00:00:00
ClamAV UPX File Handling Heap Code Execution (CVE-2006-4018)
2013-01-07 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package clamav version 0.88.4-alt1
2006-08-10 00:00:00
Security fix for the ALT Linux 9 package clamav version 0.88.4-alt1
2006-08-10 00:00:00
Security fix for the ALT Linux 10 package clamav version 0.88.4-alt1
2006-08-10 00:00:00
freebsd
freebsd
clamav -- heap overflow vulnerability
2006-08-07 00:00:00
cve
cve
CVE-2006-4018
2006-08-08 20:04:00
CVE-2006-4613
2006-09-07 00:04:00
nvd
nvd
CVE-2006-4018
2006-08-08 20:04:00
CVE-2006-4613
2006-09-07 00:04:00
f5
f5
SOL6806 - ClamAV UPX heap overflow Vulnerability - CVE-2006-4018
2007-01-10 00:00:00
K6806 : ClamAV UPX heap overflow Vulnerability - CVE-2006-4018
2013-03-27 00:00:00