Evil-DB LogoEvil-DB
← All CVEs

CVE-2006-4018

high · 7.5

Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values.

7.5
CVSS
19.4%
EPSS (exploit prob.)
97th
EPSS percentile
2006-08-08
Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

CWE-119

Affected products

VendorProductAffected versions
clamavclamav0.81
clamavclamav0.81
clamavclamav0.82
clamavclamav0.83
clamavclamav0.84
clamavclamav0.84
clamavclamav0.84
clamavclamav0.85
clamavclamav0.85.1
clamavclamav0.86
clamavclamav0.86
clamavclamav0.86.1
clamavclamav0.86.2
clamavclamav0.87
clamavclamav0.87.1
clamavclamav0.88
clamavclamav0.88.1
clamavclamav0.88.2
clamavclamav0.88.3

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2006-4018