CVE-2006-1614: Clam Anti-Virus Clamav

Medium severity, CVSS 5.1. EPSS: 7.8% chance of exploitation in the next 30 days.

Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code.

Affected products

• Clam Anti-Virus Clamav: version 0.51 only; version 0.52 only; version 0.53 only; version 0.54 only; version 0.60 only; version 0.65 only; …

Published 2006-04-06. Last modified 2026-06-16.