CVE-2006-4182
28Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendepss 20%
da publicação à arma1 dias
Publicada no NVD16 de out.
1ª PoC+1d
probabilidade de exploração
20%top 3% das CVEs
exploração observada
nãonenhuma fonte reporta
1 exploit(s) público(s)
Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning service crash) and execute arbitrary code via a crafted Portable Executable (PE) file that leads to a heap-based buffer overflow when less memory is allocated than expected.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/2587⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://docs.info.apple.com/article.html?artnum=304829http://kolab.org/security/kolab-vendor-notice-13.txthttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=422http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.htmlhttp://secunia.com/advisories/22370http://secunia.com/advisories/22421http://secunia.com/advisories/22488http://secunia.com/advisories/22498http://secunia.com/advisories/22537http://secunia.com/advisories/22551http://secunia.com/advisories/22626http://secunia.com/advisories/23155