What’s Vulnerable › Vulnerabilities

CVE-2006-1615

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 11.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-04-06 · updated 2026-06-16
• Weakness: CWE-134

Description

Multiple format string vulnerabilities in the logging code in Clam AntiVirus (ClamAV) before 0.88.1 might allow remote attackers to execute arbitrary code. NOTE: as of 20060410, it is unclear whether this is a vulnerability, as there is some evidence that the arguments are actually being sanitized properly.

Affected products

• Cisco ClamAV: through 0.88; 0.01, 0.02, 0.3, 0.03, 0.05, 0.8-rc3 (+52)

References

• http://lists.apple.com/archives/security-announce/2006/May/msg00003.html
• http://lists.suse.com/archive/suse-security-announce/2006-Apr/0002.html
• http://secunia.com/advisories/19534
• http://secunia.com/advisories/19536
• http://secunia.com/advisories/19564
• http://secunia.com/advisories/19567
• http://secunia.com/advisories/19570
• http://secunia.com/advisories/19608
• http://secunia.com/advisories/20077
• http://secunia.com/advisories/23719
• http://sourceforge.net/project/shownotes.php?release_id=407078&group_id=86638
• http://up2date.astaro.com/2006/05/low_up2date_6202.html

Get alerted when CVE-2006-1615 or the next vulnerability affects your stack