Intrusion PreventionClam.AntiVirus.PE.Rebuilding.Heap.Buffer.Overflow
Description
This indicates an attack attempt to exploit an Integer Overflow vulnerability in ClamAV.
The vulnerability is caused by the vulnerable application's failure to perform proper boundary checks on user supplied data. Successful attacks may allow a remote attacker to execute arbitrary code.
Affected Products
ClamAV 0.88.4
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrades or patches from the vendor:
http://www.clamav.net/lang/en/
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 28915 |
| Created | Oct 20, 2011 |
| Updated | Nov 09, 2021 |
| Risk |
|
| CVE ID | CVE-2006-4182 |
| Exploit Prediction Score | 36.67% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Other |