CVE - CVE-2006-6481

CVE-ID
CVE-2006-6481	Learn more at National Vulnerability Database (NVD) • Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
Clam AntiVirus (ClamAV) 0.88.6 allows remote attackers to cause a denial of service (stack overflow and application crash) by wrapping many layers of multipart/mixed content around a document, a different vulnerability than CVE-2006-5874 and CVE-2006-6406.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:http://www.quantenblog.net/security/virus-scanner-bypass CONFIRM:http://kolab.org/security/kolab-vendor-notice-14.txt CONFIRM:http://docs.info.apple.com/article.html?artnum=307562 APPLE:APPLE-SA-2008-03-18 URL:http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html DEBIAN:DSA-1238 URL:http://www.debian.org/security/2006/dsa-1238 GENTOO:GLSA-200612-18 URL:http://security.gentoo.org/glsa/glsa-200612-18.xml MANDRIVA:MDKSA-2006:230 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2006:230 SUSE:SUSE-SA:2006:078 URL:http://www.novell.com/linux/security/advisories/2006_78_clamav.html TRUSTIX:2006-0072 URL:http://www.trustix.org/errata/2006/0072/ BID:21609 URL:http://www.securityfocus.com/bid/21609 VUPEN:ADV-2006-5113 URL:http://www.vupen.com/english/advisories/2006/5113 VUPEN:ADV-2006-4948 URL:http://www.vupen.com/english/advisories/2006/4948 VUPEN:ADV-2008-0924 URL:http://www.vupen.com/english/advisories/2008/0924/references OSVDB:31283 URL:http://osvdb.org/31283 SECUNIA:23347 URL:http://secunia.com/advisories/23347 SECUNIA:23362 URL:http://secunia.com/advisories/23362 SECUNIA:23417 URL:http://secunia.com/advisories/23417 SECUNIA:23460 URL:http://secunia.com/advisories/23460 SECUNIA:23379 URL:http://secunia.com/advisories/23379 SECUNIA:23404 URL:http://secunia.com/advisories/23404 SECUNIA:23411 URL:http://secunia.com/advisories/23411 SECUNIA:29420 URL:http://secunia.com/advisories/29420
Assigning CNA
N/A
Date Entry Created
20061211	Disclaimer: The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20061211)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE list, which standardizes names for security problems.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org