CVE-2006-4018

Published: Aug 8, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values.

Affected (19)

Products: Clamav: Clamav

1 product

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Clamav Clamav	Version 0.81
Clamav Clamav	Version 0.81 rc1
Clamav Clamav	Version 0.82
Clamav Clamav	Version 0.83
Clamav Clamav	Version 0.84
Clamav Clamav	Version 0.84 rc1
Clamav Clamav	Version 0.84 rc2
Clamav Clamav	Version 0.85.1
Clamav Clamav	Version 0.85
Clamav Clamav	Version 0.86.1
Clamav Clamav	Version 0.86.2
Clamav Clamav	Version 0.86
Clamav Clamav	Version 0.86 rc1
Clamav Clamav	Version 0.87.1
Clamav Clamav	Version 0.87
Clamav Clamav	Version 0.88.1
Clamav Clamav	Version 0.88.2
Clamav Clamav	Version 0.88.3
Clamav Clamav	Version 0.88

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (42)

http://kolab.org/security/kolab-vendor-notice-10.txt

Source: cve@mitre.org

http://secunia.com/advisories/21368

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21374

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21433

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21443

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21457

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21497

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21562

Source: cve@mitre.org

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200608-13.xml

Source: cve@mitre.org

http://securitytracker.com/id?1016645

Source: cve@mitre.org

http://www.clamav.net/security/0.88.4.html

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.debian.org/security/2006/dsa-1153

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:138

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2006_46_clamav.html

Source: cve@mitre.org

http://www.overflow.pl/adv/clamav_upx_heap.txt

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.securityfocus.com/archive/1/442681/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/19381

Source: cve@mitre.org

http://www.trustix.org/errata/2006/0046/

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3175

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2006/3275

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/28286

Source: cve@mitre.org

http://kolab.org/security/kolab-vendor-notice-10.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21368

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/21374

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/21433

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/21443

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/21457

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/21497

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/21562

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200608-13.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1016645

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.clamav.net/security/0.88.4.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.debian.org/security/2006/dsa-1153

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:138

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2006_46_clamav.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.overflow.pl/adv/clamav_upx_heap.txt

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.securityfocus.com/archive/1/442681/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/19381

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.trustix.org/errata/2006/0046/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/3175

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2006/3275

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/28286

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.