Unscored severity · published Jun 27, 2006
CVE-2006-3223
Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash)…
–
CVSS
6.5%
EPSS
No
On KEV
Description
Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a scan job with format strings in the description field.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.5% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EA
Etrust Antivirus · Broadcom
8.0 · source: NVD
EP
Etrust Pestpatrol · Broadcom
8.0 · source: NVD
IT
Integrated Threat Management · Broadcom
8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3223
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3223
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047423.html
secunia.com
http://secunia.com/advisories/20856
securitytracker.com
http://securitytracker.com/id?1016391
www.osvdb.org
http://www.osvdb.org/26654
www.securityfocus.com
http://www.securityfocus.com/archive/1/438503/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/438582/100/0/threaded
More from Etrust Antivirus
–
CVE-2009-3588
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8)…
–
CVE-2009-3587
Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8)…
–
CVE-2007-3875
arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a denial of service (infinite loop and loss…
–
CVE-2007-2864
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary…
–
CVE-2006-6496
The (1) VetMONNT.sys and (2) VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL…