CVE-2006-6406: Medium severity clam anti-virus clamav vulnerability
Clam AntiVirus (ClamAV) 0.88.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6406?
CVE-2006-6406 is categorized as a high severity vulnerability due to the ability for remote attackers to bypass virus detection.
How do I fix CVE-2006-6406?
To fix CVE-2006-6406, upgrade ClamAV to a version higher than 0.88.6, as later versions contain fixes for this vulnerability.
What versions of ClamAV are affected by CVE-2006-6406?
CVE-2006-6406 specifically affects ClamAV version 0.88.6.
What technique do attackers use in CVE-2006-6406?
Attackers exploit CVE-2006-6406 by inserting invalid characters into base64 encoded content within multipart/mixed MIME files.
Is CVE-2006-6406 a common vulnerability in antivirus software?
CVE-2006-6406 highlights a common vulnerability in antivirus software where improper parsing can lead to detection bypass.