CVE-2006-5295: Clam Anti-Virus Clamav

Medium severity, CVSS 5.0. EPSS: 11.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service (scanning service crash) via a crafted Compressed HTML Help (CHM) file that causes ClamAV to "read an invalid memory location."

Affected products

• Clam Anti-Virus Clamav: up to and including 0.88.4; version . only; version 0.15 only; version 0.20 only; version 0.21 only; version 0.22 only; …

Published 2006-10-16. Last modified 2026-06-16.