Lucene search
HistoryDec 21, 2006 - 1:28 a.m.
CVE-2006-6676
cve-2006-6676
integer overflow
ole2 parser
chm parser
eset nod32 antivirus
remote code execution
buffer overflow
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
High
0.085 Low
EPSS
Percentile
94.5%
Integer overflow in the (a) OLE2 and (b) CHM parsers for ESET NOD32 Antivirus before 1.1743 allows remote attackers to execute arbitrary code via a crafted (1) .DOC or (2) .CAB file that triggers a heap-based buffer overflow.
Affected configurations
Node
eset_softwarenod32_antivirusRange≤1.1742
OReset_softwarenod32_antivirusMatch1.0.11
OReset_softwarenod32_antivirusMatch1.0.12
OReset_softwarenod32_antivirusMatch1.0.13
Related
cvelist
cvelist
CVE-2006-6676
2006-12-21 01:00:00
nvd
nvd
CVE-2006-6676
2006-12-21 01:28:00
nessus
nessus
NOD32 Antivirus < 1.1743 Multiple File Processing Vulnerabilities
2006-12-20 00:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
High
0.085 Low
EPSS
Percentile
94.5%
Related for CVE-2006-6676