Vulnerability Name:

CVE-2006-0162 (CCN-24047)

Assigned:2006-01-09
Published:2006-01-09
Updated:2017-07-20
Summary:Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) before 0.88 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted UPX files.
CVSS v3 Severity:9.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
5.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
7.6 High (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C)
5.6 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-Other
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2005-3587

Source: MITRE
Type: CNA
CVE-2006-0162

Source: FULLDISC
Type: UNKNOWN
20060112 ZDI-06-001: Clam AntiVirus UPX Unpacking Code Execution Vulnerability

Source: CCN
Type: SA18379
ClamAV UPX File Handling Buffer Overflow Vulnerability

Source: SECUNIA
Type: Patch, Vendor Advisory
18379

Source: SECUNIA
Type: UNKNOWN
18453

Source: SECUNIA
Type: UNKNOWN
18463

Source: SECUNIA
Type: UNKNOWN
18478

Source: SECUNIA
Type: UNKNOWN
18548

Source: SREASON
Type: UNKNOWN
342

Source: CCN
Type: SECTRACK ID: 1015457
Clam AntiVirus pefromupx() Buffer Overflow Has Unspecified Impact

Source: SECTRACK
Type: UNKNOWN
1015457

Source: CCN
Type: SourceForge.net: Clam AntiVirus
Latest File Releases

Source: CCN
Type: SourceForge.net: Files
Clam AntiVirus Release Name: 0.88

Source: CONFIRM
Type: UNKNOWN
http://www.clamav.net/doc/0.88/ChangeLog

Source: DEBIAN
Type: UNKNOWN
DSA-947

Source: DEBIAN
Type: DSA-947
clamav -- heap overflow

Source: CCN
Type: GLSA-200511-04
ClamAV: Multiple vulnerabilities

Source: CCN
Type: GLSA-200601-07
ClamAV: Remote execution of arbitrary code

Source: GENTOO
Type: UNKNOWN
GLSA-200601-07

Source: CCN
Type: US-CERT VU#385908
Clam AntiVirus vulnerable to memory corruption via specially crafted UPX packed file

Source: CERT-VN
Type: US Government Resource
VU#385908

Source: MANDRIVA
Type: UNKNOWN
MDKSA-2006:016

Source: OSVDB
Type: UNKNOWN
22318

Source: CCN
Type: OSVDB ID: 22318
Clam AntiVirus UPX File Processing Overflow

Source: CCN
Type: OSVDB ID: 31296
Clam AntiVirus petite.c Unspecified Overflow

Source: BID
Type: Patch
16191

Source: CCN
Type: BID-16191
Clam Anti-Virus ClamAV UPX Compressed File Heap Buffer Overflow Vulnerability

Source: TRUSTIX
Type: UNKNOWN
2006-0002

Source: VUPEN
Type: UNKNOWN
ADV-2006-0116

Source: MISC
Type: UNKNOWN
http://www.zerodayinitiative.com/advisories/ZDI-06-001.html

Source: XF
Type: UNKNOWN
clamav-libclamav-upx-bo(24047)

Source: XF
Type: UNKNOWN
clamav-libclamav-upx-bo(24047)

Source: SUSE
Type: SUSE-SR:2006:001
SUSE Security Summary Report

Source: CCN
Type: ZDI-06-001
Clam AntiVirus UPX Unpacking Code Execution

Vulnerable Configuration:Configuration 1:
  • cpe:/a:clam_anti-virus:clamav:.:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.70:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.75.1:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.80:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.80_rc1:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.80_rc2:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.80_rc3:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.80_rc4:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.81:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.82:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.83:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.84:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.84_rc1:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.84_rc2:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.85:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.85.1:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.86:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.86.1:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.86.2:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.87:*:*:*:*:*:*:*
  • OR cpe:/a:clam_anti-virus:clamav:0.87.1:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20060162
    V
    		CVE-2006-0162
    2015-11-16
    oval:org.debian:def:947
    V
    		heap overflow
    2013-01-21
    BACK
    clam_anti-virus clamav .
    clam_anti-virus clamav 0.51
    clam_anti-virus clamav 0.52
    clam_anti-virus clamav 0.53
    clam_anti-virus clamav 0.54
    clam_anti-virus clamav 0.60
    clam_anti-virus clamav 0.65
    clam_anti-virus clamav 0.67
    clam_anti-virus clamav 0.68
    clam_anti-virus clamav 0.68.1
    clam_anti-virus clamav 0.70
    clam_anti-virus clamav 0.75.1
    clam_anti-virus clamav 0.80
    clam_anti-virus clamav 0.80_rc1
    clam_anti-virus clamav 0.80_rc2
    clam_anti-virus clamav 0.80_rc3
    clam_anti-virus clamav 0.80_rc4
    clam_anti-virus clamav 0.81
    clam_anti-virus clamav 0.82
    clam_anti-virus clamav 0.83
    clam_anti-virus clamav 0.84
    clam_anti-virus clamav 0.84_rc1
    clam_anti-virus clamav 0.84_rc2
    clam_anti-virus clamav 0.85
    clam_anti-virus clamav 0.85.1
    clam_anti-virus clamav 0.86
    clam_anti-virus clamav 0.86.1
    clam_anti-virus clamav 0.86.2
    clam_anti-virus clamav 0.87
    clam_anti-virus clamav 0.87.1