Debian/clamav: unknown

Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.

Action: Upgrade clamav to 0.88.2 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2006-1989
• https://security-tracker.debian.org/tracker/CVE-2006-1989

published 2006-05-01T19:06:00Z · modified 2026-10-22T23:47:30.732284099Z · JSON