1. CVE-Search
  2. CVE-2006-0162
ID CVE-2006-0162
Summary Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) before 0.88 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted UPX files.
References
Vulnerable Configurations
  • cpe:2.3:a:clam_anti-virus:clamav:.:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:.:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.80_rc1:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.80_rc1:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.80_rc2:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.80_rc2:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.80_rc3:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.80_rc3:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.80_rc4:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.80_rc4:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.84_rc1:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.84_rc1:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.84_rc2:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.84_rc2:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*
  • cpe:2.3:a:clam_anti-virus:clamav:0.87.1:*:*:*:*:*:*:*
    cpe:2.3:a:clam_anti-virus:clamav:0.87.1:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 20-07-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 16191
cert-vn VU#385908
confirm http://www.clamav.net/doc/0.88/ChangeLog
debian DSA-947
fulldisc 20060112 ZDI-06-001: Clam AntiVirus UPX Unpacking Code Execution Vulnerability
gentoo GLSA-200601-07
mandriva MDKSA-2006:016
misc http://www.zerodayinitiative.com/advisories/ZDI-06-001.html
osvdb 22318
sectrack 1015457
secunia
  • 18379
  • 18453
  • 18463
  • 18478
  • 18548
sreason 342
trustix 2006-0002
vupen ADV-2006-0116
xf clamav-libclamav-upx-bo(24047)
Last major update 20-07-2017 - 01:29
Published 10-01-2006 - 19:03
Last modified 20-07-2017 - 01:29
Back to Top