CVE-2006-4182

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 21.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-10-16 · updated 2026-06-16

Description

Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning service crash) and execute arbitrary code via a crafted Portable Executable (PE) file that leads to a heap-based buffer overflow when less memory is allocated than expected.

Affected products

Clam Anti-Virus Clamav: through 0.88.4; ., 0.15, 0.20, 0.21, 0.22, 0.23 (+41)

References

http://docs.info.apple.com/article.html?artnum=304829
http://kolab.org/security/kolab-vendor-notice-13.txt
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=422
http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html
http://secunia.com/advisories/22370
http://secunia.com/advisories/22421
http://secunia.com/advisories/22488
http://secunia.com/advisories/22498
http://secunia.com/advisories/22537
http://secunia.com/advisories/22551
http://secunia.com/advisories/22626
http://secunia.com/advisories/23155

Get alerted when CVE-2006-4182 or the next vulnerability affects your stack