CVE-2006-5295: Medium severity Clam Anti-Virus clamav vulnerability
Published Oct 16, 2006
·Updated
Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service (scanning service crash) via a crafted Compressed HTML Help (CHM) file that causes ClamAV to "read an invalid memory location."
Affected Software
48 affected components
Clam Anti-Virus clamav=0.24
Clam Anti-Virus clamav=0.20
Clam Anti-Virus clamav=0.84
Clam Anti-Virus clamav=0.80
Clam Anti-Virus clamav=0.84_rc1
Clam Anti-Virus clamav=0.15
Clam Anti-Virus clamav=0.80_rc3
Clam Anti-Virus clamav<=0.88.4
Clam Anti-Virus clamav=0.80_rc4
Clam Anti-Virus clamav=0.65
Clam Anti-Virus clamav=0.75
Clam Anti-Virus clamav=0.68
Clam Anti-Virus clamav=0.71
Clam Anti-Virus clamav=0.88.3
Clam Anti-Virus clamav=0.86.1
Clam Anti-Virus clamav=0.82
Clam Anti-Virus clamav=0.88.1
Clam Anti-Virus clamav=0.73
Clam Anti-Virus clamav=0.72
Clam Anti-Virus clamav=0.85.1
Clam Anti-Virus clamav=.
Clam Anti-Virus clamav=0.87
Clam Anti-Virus clamav=0.86_rc1
Clam Anti-Virus clamav=0.85
Clam Anti-Virus clamav=0.80_rc1
Clam Anti-Virus clamav=0.74
Clam Anti-Virus clamav=0.75.1
Clam Anti-Virus clamav=0.86.2
Clam Anti-Virus clamav=0.67
Clam Anti-Virus clamav=0.81
Clam Anti-Virus clamav=0.21
Clam Anti-Virus clamav=0.81_rc1
Clam Anti-Virus clamav=0.54
Clam Anti-Virus clamav=0.53
Clam Anti-Virus clamav=0.70
Clam Anti-Virus clamav=0.60p
Clam Anti-Virus clamav=0.80_rc2
Clam Anti-Virus clamav=0.60
Clam Anti-Virus clamav=0.86
Clam Anti-Virus clamav=0.83
Clam Anti-Virus clamav=0.68.1
Clam Anti-Virus clamav=0.88
Clam Anti-Virus clamav=0.87.1
Clam Anti-Virus clamav=0.84_rc2
Clam Anti-Virus clamav=0.51
Clam Anti-Virus clamav=0.23
Clam Anti-Virus clamav=0.52
Clam Anti-Virus clamav=0.22
Remediation
Event History
Oct 16, 2006
CVE Published
11:07 PM
Data Sourced
via NVD·11:07 PM
RemedyDescriptionSeverityAffected Software
Oct 17, 2006
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-5295?
CVE-2006-5295 is classified as a denial of service vulnerability.
2
How do I fix CVE-2006-5295?
To fix CVE-2006-5295, upgrade ClamAV to version 0.88.5 or later.
3
What effect does CVE-2006-5295 have on ClamAV?
CVE-2006-5295 allows remote attackers to crash the ClamAV scanning service.
4
Which versions of ClamAV are affected by CVE-2006-5295?
CVE-2006-5295 affects all versions of ClamAV prior to 0.88.5.
5
Can CVE-2006-5295 be exploited remotely?
Yes, CVE-2006-5295 can be exploited remotely using a crafted Compressed HTML Help (CHM) file.