CVE-2006-6490

The CVE-2006-6490 issue affects Symantec/Norton consumer products that ship the SupportSoft ActiveX controls SmartIssue tgctlsi.dll and ScriptRunner tgctlsr.dll. The vulnerability is described as multiple stack/heap buffer overflows in these ActiveX controls, which could allow remote code executi...

Symantec自动支持助手ActiveX控件缓冲区溢出漏洞

Symantec自动支持助手是很多Symantec产品中所捆绑的ActiveX控件，用于识别Symantec用户产品中的问题。 Symantec自动支持助手ActiveX控件没有正确地验证外部输入，可能导致栈溢出并以运行浏览器用户的权限执行任意指令。 成功的攻击要求攻击者能够伪装成为可信任的Web站点并诱骗用户点击恶意的链接。 Symantec Norton AntiVirus 2006 Symantec Norton AntiVirus 2005 Symantec Norton Internet Security 2006 Symantec Norton Internet Securi...