CVE-2006-4182: Clam Anti-Virus Clamav

High severity, CVSS 7.5. EPSS: 21.4% chance of exploitation in the next 30 days.

Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning service crash) and execute arbitrary code via a crafted Portable Executable (PE) file that leads to a heap-based buffer overflow when less memory is allocated than expected.

Affected products

• Clam Anti-Virus Clamav: up to and including 0.88.4; version . only; version 0.15 only; version 0.20 only; version 0.21 only; version 0.22 only; …

Published 2006-10-16. Last modified 2026-06-16.