National Cyber Awareness System

Vulnerability Summary for CVE-2006-0162

Overview

Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) before 0.88 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted UPX files.

Impact

CVSS Severity (version 2.0 upgrade from v1.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#385908

Name: VU#385908

Hyperlink:http://www.kb.cert.org/vuls/id/385908

External Source: BID

Name: 16191

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/16191

External Source: SECUNIA

Name: 18379

Type: Advisory; Patch Information

Hyperlink:http://secunia.com/advisories/18379

External Source: VUPEN

Name: ADV-2006-0116

Hyperlink:http://www.vupen.com/english/advisories/2006/0116

External Source: CONFIRM

Name: http://www.clamav.net/doc/0.88/ChangeLog

Hyperlink:http://www.clamav.net/doc/0.88/ChangeLog

External Source: XF

Name: clamav-libclamav-upx-bo(24047)

Hyperlink:http://xforce.iss.net/xforce/xfdb/24047

External Source: MISC

Name: http://www.zerodayinitiative.com/advisories/ZDI-06-001.html

Hyperlink:http://www.zerodayinitiative.com/advisories/ZDI-06-001.html

External Source: TRUSTIX

Name: 2006-0002

Hyperlink:http://www.trustix.org/errata/2006/0002/

External Source: OSVDB

Name: 22318

Hyperlink:http://www.osvdb.org/22318

External Source: MANDRIVA

Name: MDKSA-2006:016

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:016

External Source: GENTOO

Name: GLSA-200601-07

Hyperlink:http://www.gentoo.org/security/en/glsa/glsa-200601-07.xml

External Source: DEBIAN

Name: DSA-947

Hyperlink:http://www.debian.org/security/2006/dsa-947

External Source: SECTRACK

Name: 1015457

Hyperlink:http://securitytracker.com/id?1015457

External Source: SREASON

Name: 342

Hyperlink:http://securityreason.com/securityalert/342

External Source: SECUNIA

Name: 18548

Hyperlink:http://secunia.com/advisories/18548

External Source: SECUNIA

Name: 18478

Hyperlink:http://secunia.com/advisories/18478

External Source: SECUNIA

Name: 18463

Hyperlink:http://secunia.com/advisories/18463

External Source: SECUNIA

Name: 18453

Hyperlink:http://secunia.com/advisories/18453

External Source: FULLDISC

Name: 20060112 ZDI-06-001: Clam AntiVirus UPX Unpacking Code Execution Vulnerability

Hyperlink:http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041325.html