CVE-2006-1989: clam_anti-virus clamav

EPSS trend

Probability

5.95%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

+0.14 pp

From 5.81% on 18-09-2026

18-09-202618-10-2026

EPSS score

5.95%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (secunia.com)
Maturity: unknown
referenceUnverified
Exploit Reference (clamav.net)
Maturity: unknown

References

25 links

lists.apple.com/archives/security-announce/2006/Jun/msg00000.htmlVendor AdvisoryX Refsource APPLE
secunia.com/advisories/20159Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2006:080Vendor AdvisoryX Refsource MANDRIVA
www.kb.cert.org/vuls/id/599220Third Party AdvisoryX Refsource CERT VNUS Government Resource
secunia.com/advisories/19963Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2006/1586VDB EntryX Refsource VUPEN
exchange.xforce.ibmcloud.com/vulnerabilities/26182VDB EntryX Refsource XF
securitytracker.com/id?1016392VDB EntryX Refsource SECTRACK
secunia.com/advisories/19964Third Party AdvisoryX Refsource SECUNIA
www.trustix.org/errata/2006/0024Vendor AdvisoryX Refsource TRUSTIX

Show all 25 references

secunia.com/advisories/19912Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2006_05_05.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/19880Third Party AdvisoryX Refsource SECUNIAExploitPatchVendor Advisory
www.clamav.net/security/0.88.2.htmlX Refsource CONFIRMExploitVendor Advisory
kolab.org/security/kolab-vendor-notice-09.txtX Refsource CONFIRM
www.osvdb.org/25120VDB EntryX Refsource OSVDB
lists.suse.com/archive/suse-security-announce/2006-May/0004.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/20117Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2006/dsa-1050Vendor AdvisoryX Refsource DEBIAN
www.gentoo.org/security/en/glsa/glsa-200605-03.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/20877Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2006/2566VDB EntryX Refsource VUPEN
www.securityfocus.com/bid/17754VDB EntryX Refsource BIDPatch
secunia.com/advisories/19874Third Party AdvisoryX Refsource SECUNIA
security-tracker.debian.org/tracker/CVE-2006-1989Advisory

Related vulnerabilities

CVE-2007-4560clam_anti-virusclamav+183.54%19y ago28-08-2007 01:00clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail."CVE-2007-4510clam_anti-virusclamav+21.97%19y ago23-08-2007 19:00ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service (application crash) via (1) a crafted RTF file, which triggers a NULL dereference in the cli_scanrtf function in libclamav/rtf.c; or (2) a crafted HTML document with a data: URI, which triggers a NULL dereference in the cli_html_normalise function in libclamav/htmlnorm.c. NOTE: some of these details are obtained from third party information.CVE-2005-1795clam_anti-virusclamav3.64%21y ago01-06-2005 04:00The filecopy function in misc.c in Clam AntiVirus (ClamAV) before 0.85, on Mac OS, allows remote attackers to execute arbitrary code via a virus in a filename that contains shell metacharacters, which are not properly handled when HFS permissions prevent the file from being deleted and ditto is invoked.CVE-2005-3239clam_anti-virusclamav+14.48%21y ago14-10-2005 04:00The OLE2 unpacker in clamd in Clam AntiVirus (ClamAV) 0.87-1 allows remote attackers to cause a denial of service (segmentation fault) via a DOC file with an invalid property tree, which triggers an infinite recursion in the ole2_walk_property_tree function.CVE-2008-2713clam_anti-virusclamav+14.71%18y ago16-06-2008 21:00libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite file that triggers an out-of-bounds read.CVE-2008-1836clam_anti-virusclamav3.55%18y ago16-04-2008 16:00The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read.

All vulnerabilities inclamav

CVE-2006-1989: clam_anti-virus clamav

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References