CVE-2006-1614: clam_anti-virus clamav
Vulnerability summary
CVE-2006-1614 is a medium (CVSS 5.1) vulnerability in clam_anti-virus clamav. EPSS estimates a 7.81% chance of exploitation in the next 30 days, higher than 94.6% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 2 · Related 1Timeline
- 06-04-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
7.81%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
+0.18 pp
From 7.63% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (overflow.pl)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Clam_anti-virus1 product
- clamav0.51 | 0.52 | 0.53 | 0.54 | 0.60 | 0.65 | 0.67 | 0.68 | 0.68.1 | 0.70 | 0.75.1 | 0.80 | 0.80_rc1 | 0.80_rc2 | 0.80_rc3 | 0.80_rc4 | 0.81 | 0.82 | 0.83 | 0.84 | 0.84_rc1 | 0.84_rc2 | 0.85 | 0.85.1 | 0.86 | 0.86.1 | 0.86.2 | 0.87 | 0.87.1 | 0.88
Debian1 product
- clamav< 0.88.1-1
2 vendors · 2 products
References
27 links- www.us-cert.gov/cas/techalerts/TA06-132A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
Show all 27 references
- up2date.astaro.com/2006/05/low_up2date_6202.htmlX Refsource CONFIRM
