VULNERABILITY INTELLIGENCE

CVE-2006-1989

CVSS score5.1 MEDIUM
EPSS probability5.95%
CISA KEVNot currently listed
Published2006-05-01
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:P

Description

Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.

Primary references