Unscored severity · published Feb 22, 2007
CVE-2006-6490
Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and…
–
CVSS
10.4%
EPSS
No
On KEV
Description
Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HTML message.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.4% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Automated Support Assistant · Symantec
All versions, or not specified · source: NVD
NA
Norton Antivirus · Symantec
2006 · source: NVD
NI
Norton Internet Security · Symantec
2006 · source: NVD
NS
Norton System Works · Symantec
2006 · source: NVD
SC
Scriptrunner · Supportsoft
All versions, or not specified · source: NVD
SM
Smartissue · Supportsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6490
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6490
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2007-02/0454.html
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=478
osvdb.org
http://osvdb.org/33481
osvdb.org
http://osvdb.org/33482
secunia.com
http://secunia.com/advisories/24246
secunia.com
http://secunia.com/advisories/24251