CVE-2006-5295
EPSS 26.6%
Description
Unspecified vulnerability in ClamAV before 0.88.5 allows remote attackers to cause a denial of service (scanning service crash) via a crafted Compressed HTML Help (CHM) file that causes ClamAV to "read an invalid memory location."
How to fix CVE-2006-5295
To remediate CVE-2006-5295, upgrade the affected package to a fixed version below.
- Debian/clamav—upgrade to 0.88.5-1 or later
Is CVE-2006-5295 being exploited?
Moderate — EPSS is 26.6%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- from 0, < 0.88.5-1