Lucene search

[email protected]CVE-2006-5403

HistoryOct 19, 2006 - 1:07 a.m.

CVE-2006-5403

2006-10-1901:07:00

[email protected]

web.nvd.nist.gov

cve-2006-5403

symantec

buffer overflow

activex

denial of service

remote attack

arbitrary code_execution

8.2 High

AI Score

Confidence

High

5.1 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.059 Low

EPSS

Percentile

93.5%

JSON

Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

Affected configurations

NVD

Node

symantecautomated_support_assistant

symantecnorton_antivirus

symantecnorton_internet_securityMatch2006

symantecnorton_system_worksMatch2005

symantecnorton_system_worksMatch2006

CPENameOperatorVersion
symantec:automated_support_assistantsymantec automated support assistanteq*
symantec:norton_antivirussymantec norton antiviruseq*
symantec:norton_internet_securitysymantec norton internet securityeq2006
symantec:norton_system_workssymantec norton system workseq2005
symantec:norton_system_workssymantec norton system workseq2006

CPE	Name	Operator	Version
symantec:automated_support_assistant	symantec automated support assistant	eq	*
symantec:norton_antivirus	symantec norton antivirus	eq	*
symantec:norton_internet_security	symantec norton internet security	eq	2006
symantec:norton_system_works	symantec norton system works	eq	2005
symantec:norton_system_works	symantec norton system works	eq	2006

References

secunia.com/advisories/22228

securityresponse.symantec.com/avcenter/security/Content/2006.10.05.html

securitytracker.com/id?1016988

securitytracker.com/id?1016989

securitytracker.com/id?1016990

securitytracker.com/id?1016991

www.kb.cert.org/vuls/id/400601

www.securityfocus.com/bid/20348

www.vupen.com/english/advisories/2006/3929

exchange.xforce.ibmcloud.com/vulnerabilities/29363

8.2 High

AI Score

Confidence

High

5.1 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.059 Low

EPSS

Percentile

93.5%

JSON

Related for CVE-2006-5403

nvd1 cert1 cvelist1