CVE-2006-4018
ClamAV 0.81-0.88.3 - Remote Code Execution via UPX Packed File with Large rsize Values
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-4018. PoCs published by Damian Put.
AI-analyzed exploit summary The provided text describes a heap buffer-overflow vulnerability in ClamAV versions 0.88.2 and 0.88.3 when handling compressed UPX files. It lacks actual exploit code but references a binary exploit available elsewhere.
Description
Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values.
Exploits (1)
The provided text describes a heap buffer-overflow vulnerability in ClamAV versions 0.88.2 and 0.88.3 when handling compressed UPX files. It lacks actual exploit code but references a binary exploit available elsewhere.