CVE-2006-1614

Published: Apr 6, 2006Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code.

Affected (30)

Products: Clam Anti Virus: Clamav

Clam Anti Virus

1 product

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Clam Anti Virus Clamav	Version 0.51
Clam Anti Virus Clamav	Version 0.52
Clam Anti Virus Clamav	Version 0.53
Clam Anti Virus Clamav	Version 0.54
Clam Anti Virus Clamav	Version 0.60
Clam Anti Virus Clamav	Version 0.65
Clam Anti Virus Clamav	Version 0.67
Clam Anti Virus Clamav	Version 0.68.1
Clam Anti Virus Clamav	Version 0.68
Clam Anti Virus Clamav	Version 0.70
Clam Anti Virus Clamav	Version 0.75.1
Clam Anti Virus Clamav	Version 0.80
Clam Anti Virus Clamav	Version 0.80_rc1
Clam Anti Virus Clamav	Version 0.80_rc2
Clam Anti Virus Clamav	Version 0.80_rc3
Clam Anti Virus Clamav	Version 0.80_rc4
Clam Anti Virus Clamav	Version 0.81
Clam Anti Virus Clamav	Version 0.82
Clam Anti Virus Clamav	Version 0.83
Clam Anti Virus Clamav	Version 0.84
Clam Anti Virus Clamav	Version 0.84_rc1
Clam Anti Virus Clamav	Version 0.84_rc2
Clam Anti Virus Clamav	Version 0.85.1
Clam Anti Virus Clamav	Version 0.85
Clam Anti Virus Clamav	Version 0.86.1
Clam Anti Virus Clamav	Version 0.86.2
Clam Anti Virus Clamav	Version 0.86
Clam Anti Virus Clamav	Version 0.87.1
Clam Anti Virus Clamav	Version 0.87
Clam Anti Virus Clamav	Version 0.88

References (52)

http://lists.apple.com/archives/security-announce/2006/May/msg00003.html

Source: cve@mitre.org

http://lists.suse.com/archive/suse-security-announce/2006-Apr/0002.html

Source: cve@mitre.org

http://secunia.com/advisories/19534

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/19536

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/19564

Source: cve@mitre.org

http://secunia.com/advisories/19567

Source: cve@mitre.org

http://secunia.com/advisories/19570

Source: cve@mitre.org

http://secunia.com/advisories/19608

Source: cve@mitre.org

http://secunia.com/advisories/20077

Source: cve@mitre.org

http://secunia.com/advisories/23719

Source: cve@mitre.org

http://securitytracker.com/id?1015887

Source: cve@mitre.org

http://sourceforge.net/project/shownotes.php?release_id=407078&group_id=86638

Source: cve@mitre.org

Patch

http://up2date.astaro.com/2006/05/low_up2date_6202.html

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1024

Source: cve@mitre.org

PatchVendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200604-06.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:067

Source: cve@mitre.org

http://www.osvdb.org/24457

Source: cve@mitre.org

http://www.overflow.pl/adv/clamavupxinteger.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/archive/1/430405/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/17388

Source: cve@mitre.org

http://www.securityfocus.com/bid/17951

Source: cve@mitre.org

http://www.trustix.org/errata/2006/0020

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA06-132A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2006/1258

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1779

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25660

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2006/May/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.suse.com/archive/suse-security-announce/2006-Apr/0002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19534

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/19536

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/19564

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19567

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19570

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19608

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20077

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/23719

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015887

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/project/shownotes.php?release_id=407078&group_id=86638

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://up2date.astaro.com/2006/05/low_up2date_6202.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2006/dsa-1024

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200604-06.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:067

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/24457

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.overflow.pl/adv/clamavupxinteger.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.securityfocus.com/archive/1/430405/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/17388

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/17951

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.trustix.org/errata/2006/0020

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA06-132A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2006/1258

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/1779

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/25660

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.