CVE-2006-1614
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 7.8%
exploitation probability
7.8%top 5% of all CVEs
observed exploitation
nono source reports it
Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Affected products
n/a · n/aReferences
http://lists.apple.com/archives/security-announce/2006/May/msg00003.htmlhttp://lists.suse.com/archive/suse-security-announce/2006-Apr/0002.htmlhttp://secunia.com/advisories/19534http://secunia.com/advisories/19536http://secunia.com/advisories/19564http://secunia.com/advisories/19567http://secunia.com/advisories/19570http://secunia.com/advisories/19608http://secunia.com/advisories/20077http://secunia.com/advisories/23719http://securitytracker.com/id?1015887https://exchange.xforce.ibmcloud.com/vulnerabilities/25660