CVE-2006-0162
Clam AntiVirus UPX Unpacking Code Execution Vulnerability
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) before 0.88 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted UPX files.
This vulnerability allows remote attackers to execute arbitrary code on vulnerable Clam AntiVirus installations. Authentication is not required to exploit this vulnerability.
This specific flaw exists within libclamav/upx.c during the unpacking of executable files compressed with UPX. Due to an invalid size calculation during a data copy from the user-controlled file to heap allocated memory, an exploitable memory corruption condition is created.
*Credits:
Anonymous
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2006-01-10 CVE Reserved
- 2006-01-10 CVE Published
- 2024-05-01 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (19)
| URL | Tag | Source |
|---|---|---|
| http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041325.html | Mailing List | |
| http://secunia.com/advisories/18453 | Third Party Advisory | |
| http://secunia.com/advisories/18463 | Third Party Advisory | |
| http://secunia.com/advisories/18478 | Third Party Advisory | |
| http://secunia.com/advisories/18548 | Third Party Advisory | |
| http://securityreason.com/securityalert/342 | Third Party Advisory | |
| http://securitytracker.com/id?1015457 | Vdb Entry | |
| http://www.clamav.net/doc/0.88/ChangeLog | X_refsource_confirm | |
| http://www.kb.cert.org/vuls/id/385908 | Third Party Advisory |
|
| http://www.osvdb.org/22318 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2006/0116 | Vdb Entry | |
| http://www.zerodayinitiative.com/advisories/ZDI-06-001.html | X_refsource_misc |
|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/24047 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/18379 | 2017-07-20 | |
| http://www.securityfocus.com/bid/16191 | 2017-07-20 |
| URL | Date | SRC |
|---|---|---|
| http://www.debian.org/security/2006/dsa-947 | 2017-07-20 | |
| http://www.gentoo.org/security/en/glsa/glsa-200601-07.xml | 2017-07-20 | |
| http://www.mandriva.com/security/advisories?name=MDKSA-2006:016 | 2017-07-20 | |
| http://www.trustix.org/errata/2006/0002 | 2017-07-20 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | . Search vendor "Clam Anti-virus" for product "Clamav" and version "." | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.51 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.51" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.52 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.52" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.53 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.53" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.54 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.54" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.60 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.60" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.65 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.65" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.67 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.67" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.68 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.68" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.68.1 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.68.1" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.70 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.70" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.75.1 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.75.1" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.80 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.80" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.80_rc1 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.80_rc1" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.80_rc2 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.80_rc2" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.80_rc3 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.80_rc3" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.80_rc4 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.80_rc4" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.81 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.81" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.82 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.82" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.83 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.83" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.84 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.84" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.84_rc1 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.84_rc1" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.84_rc2 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.84_rc2" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.85 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.85" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.85.1 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.85.1" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.86 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.86" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.86.1 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.86.1" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.86.2 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.86.2" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.87 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.87" | - |
Affected
| ||||||
| Clam Anti-virus Search vendor "Clam Anti-virus" | Clamav Search vendor "Clam Anti-virus" for product "Clamav" | 0.87.1 Search vendor "Clam Anti-virus" for product "Clamav" and version "0.87.1" | - |
Affected
| ||||||