Lucene search
HistorySep 20, 2006 - 11:07 p.m.
CVE-2006-4438
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
AI Score
8.2
Confidence
High
EPSS
0.035
Percentile
91.6%
Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LHA archive with an extended header that contains a long directory name.
Affected configurations
Node
doctor_web_ltddr.webRange≤4.33_for_linux
| Vendor | Product | Version | CPE |
|---|---|---|---|
| doctor_web_ltd | dr.web | * | cpe:2.3:a:doctor_web_ltd:dr.web:*:*:*:*:*:*:*:* |
Related
securityvulns
securityvulns
cve
cve
CVE-2006-4438
2006-09-20 23:07:00
cvelist
cvelist
CVE-2006-4438
2006-09-20 23:00:00
exploitdb
exploitdb
Dr.Web AntiVirus 4.33 - LHA long Directory name Local Overflow
2006-09-20 00:00:00
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
AI Score
8.2
Confidence
High
EPSS
0.035
Percentile
91.6%
Related for NVD:CVE-2006-4438