Login Request a demo
Unscored severity · published Oct 19, 2006
CVE-2006-5404
Unspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006,…
–
CVSS
2.6%
EPSS
No
On KEV
Description
Unspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to obtain sensitive information via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Automated Support Assistant · Symantec
All versions, or not specified · source: NVD
NA
Norton Antivirus · Symantec
All versions, or not specified · source: NVD
NI
Norton Internet Security · Symantec
2006 · source: NVD
NS
Norton System Works · Symantec
2005; 2006 · source: NVD
Affected product
AS
Automated Support Assistant
Symantec
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5404
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5404
Vendor Advisory
http://secunia.com/advisories/22228
Patch
http://securityresponse.symantec.com/avcenter/security/Content/2006.10.05.html
securitytracker.com
http://securitytracker.com/id?1016988
securitytracker.com
http://securitytracker.com/id?1016989
securitytracker.com
http://securitytracker.com/id?1016990
securitytracker.com
http://securitytracker.com/id?1016991
More from Automated Support Assistant
–
CVE-2006-6490
Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and…
–
CVE-2006-5403
Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006,…