Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-eek7-jgkz-akdh
Vulnerability ID VCID-eek7-jgkz-akdh
Aliases CVE-2006-4018
Summary ClamAV is vulnerable to a heap-based buffer overflow resulting in a Denial of Service and potentially remote execution of arbitrary code.
Status Published
Exploitability 2.0
Weighted Severity 0.4
Risk 0.8
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
Data source Exploit-DB
Date added Aug. 7, 2006
Description Clam Anti-Virus ClamAV 0.88.x - UPX Compressed PE File Heap Buffer Overflow
Ransomware campaign use Known
Source publication date Aug. 7, 2006
Exploit type dos
Platform linux
Source update date Sept. 24, 2013
Source URL https://www.securityfocus.com/bid/19381/info
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.97549
EPSS Score 0.44627
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:01:08.604630+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/200608-13 38.0.0