Lucene search

[email protected]CVE-2006-6490

HistoryFeb 22, 2007 - 9:28 p.m.

CVE-2006-6490

2007-02-2221:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-6490

buffer overflow

supportsoft

smartissue

scriptrunner

activex controls

symantec

norton antivirus

automated support assistant

internet security

system works 2006

remote code execution

html message

7.4 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.079 Low

EPSS

Percentile

94.2%

JSON

Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HTML message.

CPENameOperatorVersion
supportsoft:scriptrunnersupportsoft scriptrunnereq*
supportsoft:smartissuesupportsoft smartissueeq*
symantec:norton_system_workssymantec norton system workseq2006
symantec:norton_antivirussymantec norton antiviruseq2006
symantec:norton_internet_securitysymantec norton internet securityeq2006
symantec:automated_support_assistantsymantec automated support assistanteq*

CPE	Name	Operator	Version
supportsoft:scriptrunner	supportsoft scriptrunner	eq	*
supportsoft:smartissue	supportsoft smartissue	eq	*
symantec:norton_system_works	symantec norton system works	eq	2006
symantec:norton_antivirus	symantec norton antivirus	eq	2006
symantec:norton_internet_security	symantec norton internet security	eq	2006
symantec:automated_support_assistant	symantec automated support assistant	eq	*

References

archives.neohapsis.com/archives/bugtraq/2007-02/0454.html

labs.idefense.com/intelligence/vulnerabilities/display.php?id=478

osvdb.org/33481

osvdb.org/33482

secunia.com/advisories/24246

secunia.com/advisories/24251

www.kb.cert.org/vuls/id/441785

www.securityfocus.com/archive/1/461147/100/0/threaded

www.securityfocus.com/bid/22564

www.securitytracker.com/id?1017688

www.securitytracker.com/id?1017689

www.securitytracker.com/id?1017690

www.securitytracker.com/id?1017691

www.symantec.com/avcenter/security/Content/2007.02.22.html

www.vupen.com/english/advisories/2007/0703

www.vupen.com/english/advisories/2007/0704

exchange.xforce.ibmcloud.com/vulnerabilities/32636

7.4 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.079 Low

EPSS

Percentile

94.2%

JSON

Related for CVE-2006-6490

checkpoint_advisories1 securityvulns2 saint4 cert1 cvelist1