CVE-2006-0162

CVE-2006-0162 describes a heap-based buffer overflow in Clam Antivirus (ClamAV) versions prior to 0.88, specifically within the libclamav/upx.c component. This vulnerability allows remote attackers to trigger a denial of service (crash) and potentially execute arbitrary code by processing specially crafted UPX files. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector and low attack complexity, enabling potential partial compromise of confidentiality, integrity, and availability. Despite its age and severity, there is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, nor significant community discussion or media coverage.