CVE-2006-4182

CVE-2006-4182 describes an integer overflow vulnerability in ClamAV versions 0.88.1, 0.88.4, and other versions prior to 0.88.5. This flaw allows remote attackers to trigger a heap-based buffer overflow via a crafted Portable Executable (PE) file, leading to a denial of service (scanning service crash) and potential arbitrary code execution. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impact. While not listed in CISA's KEV catalog, a proof-of-concept exploit is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.