Patchwire CVEs, their patch status, and feeds to follow them

CVE-2006-4182

Fixed in a distro release EPSS 21%

Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning service crash) and execute arbitrary code via a crafted Portable Executable (PE) file that leads to a heap-based buffer overflow when less memory is allocated than expected.

Published 2006-10-16 · CVE record · OSV

Products: clam_anti-virus clamav

Distro releases

ReleasePackageFixed in
Debian 12clamav0.88.5-1
Debian 13clamav0.88.5-1
Debian 14clamav0.88.5-1
Debian 3.1clamav0.84-2.sarge.11
openSUSE Tumbleweedclamav0.103.3-1.4