1. CVE-Search
  2. CVE-2006-1614
ID CVE-2006-1614
Summary Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
References
Vulnerable Configurations
  • cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.80_rc1:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.80_rc1:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.80_rc2:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.80_rc2:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.80_rc3:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.80_rc3:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.80_rc4:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.80_rc4:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.84_rc1:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.84_rc1:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.84_rc2:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.84_rc2:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.87.1:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.87.1:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.88:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.88:*:*:*:*:*:*:*
CVSS
Base: 5.1 (as of 18-10-2018 - 16:33)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK HIGH NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:H/Au:N/C:P/I:P/A:P
refmap via4
apple APPLE-SA-2006-05-11
bid
  • 17388
  • 17951
bugtraq 20060406 [Overflow.pl] Clam AntiVirus Win32-UPX Heap Overflow (not default configuration)
cert TA06-132A
confirm
debian DSA-1024
gentoo GLSA-200604-06
mandriva MDKSA-2006:067
misc http://www.overflow.pl/adv/clamavupxinteger.txt
osvdb 24457
sectrack 1015887
secunia
  • 19534
  • 19536
  • 19564
  • 19567
  • 19570
  • 19608
  • 20077
  • 23719
suse SUSE-SA:2006:020
trustix 2006-0020
vupen
  • ADV-2006-1258
  • ADV-2006-1779
xf clamav-pe-overflow(25660)
Last major update 18-10-2018 - 16:33
Published 06-04-2006 - 22:04
Last modified 18-10-2018 - 16:33
Back to Top