CVE-2006-1615
EPSS 36.8%
Description
Multiple format string vulnerabilities in the logging code in Clam AntiVirus (ClamAV) before 0.88.1 might allow remote attackers to execute arbitrary code. NOTE: as of 20060410, it is unclear whether this is a vulnerability, as there is some evidence that the arguments are actually being sanitized properly.
How to fix CVE-2006-1615
To remediate CVE-2006-1615, upgrade the affected package to a fixed version below.
- Debian/clamav—upgrade to 0.88.1-1 or later
Is CVE-2006-1615 being exploited?
Moderate — EPSS is 36.8%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- from 0, < 0.88.1-1