CVE-2006-2630: Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack vectors | LiveThreat CVE Feed — Verisq

Login Request a demo

Unscored severity · published May 27, 2006

CVE-2006-2630

Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack vectors

–

CVSS

73.6%

EPSS

No

On KEV

Description

Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack vectors.

Exploitation

Is it being used?

Exploit prediction (EPSS)73.6% · higher than 99% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

CS

Client Security · Symantec

3.0; 3.0.2.2010; 3.0.2.2020; 3.1; 3.1.394; 3.1.400 · source: NVD

NA

Norton Antivirus · Symantec

10.0; 10.0.2.2010; 10.0.2.2020; 10.0.2.2021; 10.1; 10.1.400 · source: NVD

Affected product

CS

Client Security

Symantec

All Client Security CVEs

References

https://nvd.nist.gov/vuln/detail/CVE-2006-2630

https://www.cve.org/CVERecord?id=CVE-2006-2630

lists.grok.org.uk

http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046355.html

http://secunia.com/advisories/20318

http://securityresponse.symantec.com/avcenter/security/Content/2006.05.25.html

http://securitytracker.com/id?1016161

http://securitytracker.com/id?1016162

http://www.eeye.com/html/research/upcoming/20060524.html

More from Client Security

–

Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and…

–

Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and…

–

The on-demand scanning in Symantec AntiVirus 10.0.x and 10.1.x before MR9, AntiVirus 10.2.x, and Client Security 3.0.x and 3.1.x before MR9, when Tamper protection is disabled,…

–

Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before…

–

Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security (SCS) before 3.1 MR8, and…