10

CVE-2006-5938

Grisoft AVG Anti-Virus before 7.1.407 has unknown impact and remote attack vectors involving an uninitialized variable and a crafted CAB file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Grisoft ≫ Avg Antivirus Version7.0
Grisoft ≫ Avg Antivirus Version7.0.251
Grisoft ≫ Avg Antivirus Version7.0.323
Grisoft ≫ Avg Antivirus Version7.1.308
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.13% 0.795
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://marc.info/?l=full-disclosure&m=116343152030074&w=2
Mailing List
http://secunia.com/advisories/22811
Patch
Vendor Advisory
http://www.grisoft.com/doc/36365/lng/us/tpl/tpl01
Patch
Product
http://www.vupen.com/english/advisories/2006/4498
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/30246