National Cyber Awareness System

Vulnerability Summary for CVE-2006-4018

Overview

Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Solution

This vulnerability is addressed in the following product release: Clam Anti-Virus, ClamAV, 0.88.4}

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: MISC

Name: http://www.overflow.pl/adv/clamav_upx_heap.txt

Type: Advisory; Patch Information; Exploit

Hyperlink:http://www.overflow.pl/adv/clamav_upx_heap.txt

External Source: CONFIRM

Name: http://www.clamav.net/security/0.88.4.html

Type: Advisory; Patch Information; Exploit

Hyperlink:http://www.clamav.net/security/0.88.4.html

External Source: XF

Name: clamav-pefromupx-bo(28286)

Hyperlink:http://xforce.iss.net/xforce/xfdb/28286

External Source: VUPEN

Name: ADV-2006-3275

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2006/3275

External Source: VUPEN

Name: ADV-2006-3175

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2006/3175

External Source: TRUSTIX

Name: 2006-0046

Hyperlink:http://www.trustix.org/errata/2006/0046/

External Source: BID

Name: 19381

Hyperlink:http://www.securityfocus.com/bid/19381

External Source: BUGTRAQ

Name: 20060809 [Overflow.pl] Clam AntiVirus Win32-UPX Heap Overflow

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/442681/100/0/threaded

External Source: SUSE

Name: SUSE-SA:2006:046

Hyperlink:http://www.novell.com/linux/security/advisories/2006_46_clamav.html

External Source: MANDRIVA

Name: MDKSA-2006:138

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:138

External Source: DEBIAN

Name: DSA-1153

Hyperlink:http://www.debian.org/security/2006/dsa-1153

External Source: SECTRACK

Name: 1016645

Hyperlink:http://securitytracker.com/id?1016645

External Source: GENTOO

Name: GLSA-200608-13

Hyperlink:http://security.gentoo.org/glsa/glsa-200608-13.xml

External Source: SECUNIA

Name: 21562

Type: Advisory

Hyperlink:http://secunia.com/advisories/21562

External Source: SECUNIA

Name: 21497

Type: Advisory

Hyperlink:http://secunia.com/advisories/21497

External Source: SECUNIA

Name: 21457

Type: Advisory

Hyperlink:http://secunia.com/advisories/21457

External Source: SECUNIA

Name: 21443

Type: Advisory

Hyperlink:http://secunia.com/advisories/21443

External Source: SECUNIA

Name: 21433

Type: Advisory

Hyperlink:http://secunia.com/advisories/21433

External Source: SECUNIA

Name: 21374

Type: Advisory

Hyperlink:http://secunia.com/advisories/21374

External Source: SECUNIA

Name: 21368

Type: Advisory

Hyperlink:http://secunia.com/advisories/21368

External Source: CONFIRM

Name: http://kolab.org/security/kolab-vendor-notice-10.txt

Hyperlink:http://kolab.org/security/kolab-vendor-notice-10.txt