7.5

CVE-2006-6293

Exploit
Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code via a crafted CHM file. NOTE: this issue has at least a partial overlap with CVE-2006-6294.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
F-prot ≫ F-prot Antivirus Version <= 4.6.6
F-prot ≫ F-prot Antivirus Version3.11b
F-prot ≫ F-prot Antivirus Version3.12
F-prot ≫ F-prot Antivirus Version3.12a
F-prot ≫ F-prot Antivirus Version3.12b
F-prot ≫ F-prot Antivirus Version3.12c
F-prot ≫ F-prot Antivirus Version3.12d
F-prot ≫ F-prot Antivirus Version3.13
F-prot ≫ F-prot Antivirus Version3.13a
F-prot ≫ F-prot Antivirus Version3.14
F-prot ≫ F-prot Antivirus Version3.14a
F-prot ≫ F-prot Antivirus Version3.14b
F-prot ≫ F-prot Antivirus Version3.14c
F-prot ≫ F-prot Antivirus Version3.14d
F-prot ≫ F-prot Antivirus Version3.14e
F-prot ≫ F-prot Antivirus Version3.15
F-prot ≫ F-prot Antivirus Version3.15a
F-prot ≫ F-prot Antivirus Version3.15b
F-prot ≫ F-prot Antivirus Version3.16
F-prot ≫ F-prot Antivirus Version3.16a
F-prot ≫ F-prot Antivirus Version3.16b
F-prot ≫ F-prot Antivirus Version3.16c
F-prot ≫ F-prot Antivirus Version3.16d
F-prot ≫ F-prot Antivirus Version3.16e
F-prot ≫ F-prot Antivirus Version3.16f
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 15.96% 0.965
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://gleg.net/vulndisco_meta.shtml
Exploit
http://gleg.net/fprot.txt
http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051096.html
http://secunia.com/advisories/22879
Vendor Advisory
http://secunia.com/advisories/23328
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200612-12.xml
http://securitytracker.com/id?1017331
http://www.f-prot.com/news/gen_news/061201_release_unix467.html
http://www.osvdb.org/30406
http://www.securityfocus.com/archive/1/453475/100/0/threaded
http://www.securityfocus.com/bid/21086
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2006/4830
Vendor Advisory
https://www.exploit-db.com/exploits/2893