CVE-2006-6490

CVE-2006-6490

Published · Updated

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 10%
exploitation probability
10%top 4% of all CVEs
observed exploitation
nono source reports it
Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HTML message.
Affected products
n/a · n/a
References
http://archives.neohapsis.com/archives/bugtraq/2007-02/0454.htmlhttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=478http://osvdb.org/33481http://osvdb.org/33482http://secunia.com/advisories/24246http://secunia.com/advisories/24251https://exchange.xforce.ibmcloud.com/vulnerabilities/32636http://www.kb.cert.org/vuls/id/441785http://www.securityfocus.com/archive/1/461147/100/0/threadedhttp://www.securityfocus.com/bid/22564http://www.securitytracker.com/id?1017688http://www.securitytracker.com/id?1017689