Intrusion PreventionClamAV.UPX.File.Handling.Buffer.Overflow
Description
This indicates an attempt to exploit a buffer overflow vulnerability in Clam AV.
The vulnerability can be exploited via a crafted UPX compressed executable file with illegal parameters in the UPX1 section. This allows a remote attacker to execute arbitrary code on a vulnerable system with root privileges.
Affected Products
Clam AntiVirus: Clam AntiVirus 0.87 and prior.
Impact
System compromise: remote code execution.
Recommended Actions
Apply the appropriate patch for your system.
http://www.clamav.net
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 13400 |
| Created | Oct 19, 2006 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2005-2920 |
| Exploit Prediction Score | 33.13% |
| Default Action | drop |
| Active | |
| Affected OS | Linux, Other |
| Affected App | Other |