CVE-2006-1614

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-04-06 · updated 2026-06-16

Description

Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code.

Affected products

Clam Anti-Virus Clamav: 0.51, 0.52, 0.53, 0.54, 0.60, 0.65 (+24)

References

http://lists.apple.com/archives/security-announce/2006/May/msg00003.html
http://lists.suse.com/archive/suse-security-announce/2006-Apr/0002.html
http://secunia.com/advisories/19534
http://secunia.com/advisories/19536
http://secunia.com/advisories/19564
http://secunia.com/advisories/19567
http://secunia.com/advisories/19570
http://secunia.com/advisories/19608
http://secunia.com/advisories/20077
http://secunia.com/advisories/23719
http://securitytracker.com/id?1015887
http://sourceforge.net/project/shownotes.php?release_id=407078&group_id=86638

Get alerted when CVE-2006-1614 or the next vulnerability affects your stack