CVE-2006-4182
28Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendepss 20%
de la publicación al arma1 días
Publicada en NVD16 oct
1ª PoC+1d
probabilidad de explotación
20%top 3% de las CVE
explotación observada
noninguna fuente lo reporta
1 exploit(s) público(s)
Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning service crash) and execute arbitrary code via a crafted Portable Executable (PE) file that leads to a heap-based buffer overflow when less memory is allocated than expected.
Productos afectados
n/a · n/aPoCs públicas encontradas — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/2587⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://docs.info.apple.com/article.html?artnum=304829http://kolab.org/security/kolab-vendor-notice-13.txthttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=422http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.htmlhttp://secunia.com/advisories/22370http://secunia.com/advisories/22421http://secunia.com/advisories/22488http://secunia.com/advisories/22498http://secunia.com/advisories/22537http://secunia.com/advisories/22551http://secunia.com/advisories/22626http://secunia.com/advisories/23155