CVE-2006-4018 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2006-4018
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-4018

Description: Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/28286 TRUSTIX http://www.trustix.org/errata/2006/0046/ SUSE http://www.novell.com/linux/security/advisories/2006_46_clamav.html ST 1016645 SAID Secunia Advisory: SA21374 Secunia Advisory: SA21368 Secunia Advisory: SA21433 Secunia Advisory: SA21457 Secunia Advisory: SA21443 Secunia Advisory: SA21497 Secunia Advisory: SA21562 MISC http://www.overflow.pl/adv/clamav_upx_heap.txt MANDRIVA http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:138 GENTOO http://security.gentoo.org/glsa/glsa-200608-13.xml DEBIAN http://www.debian.org/security/2006/dsa-1153 CONFIRM http://kolab.org/security/kolab-vendor-notice-10.txt http://www.clamav.net/security/0.88.4.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/442681/100/0/threaded BID 19381

Return to the previous page.