← Database

CVE-2006-4018

HIGH CVSS: 7.5 Published: 2006-08-08 Modified: 2026-06-16

Description

Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values.

Affected Platforms

Clamav Clamav

Weakness Type

CWE-119

References