CVE-2006-4182
Fixed in a distro release EPSS 21%
Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning service crash) and execute arbitrary code via a crafted Portable Executable (PE) file that leads to a heap-based buffer overflow when less memory is allocated than expected.
Products: clam_anti-virus clamav
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | clamav | 0.88.5-1 |
| Debian 13 | clamav | 0.88.5-1 |
| Debian 14 | clamav | 0.88.5-1 |
| Debian 3.1 | clamav | 0.84-2.sarge.11 |
| openSUSE Tumbleweed | clamav | 0.103.3-1.4 |