cve-2006-6293
Vulnerability from cvelistv5
Published
2006-12-05 11:00
Modified
2024-08-07 20:19
Severity ?
EPSS score ?
Summary
Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code via a crafted CHM file. NOTE: this issue has at least a partial overlap with CVE-2006-6294.
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-07T20:19:35.250Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "http://gleg.net/vulndisco_meta.shtml" }, { "name": "23328", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/23328" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://www.f-prot.com/news/gen_news/061201_release_unix467.html" }, { "name": "22879", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/22879" }, { "name": "30406", "tags": [ "vdb-entry", "x_refsource_OSVDB", "x_transferred" ], "url": "http://www.osvdb.org/30406" }, { "name": "1017331", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://securitytracker.com/id?1017331" }, { "name": "21086", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/21086" }, { "name": "20061204 F-Prot Antivirus for Unix: heap overflow and Denial of Service", "tags": [ "mailing-list", "x_refsource_BUGTRAQ", "x_transferred" ], "url": "http://www.securityfocus.com/archive/1/453475/100/0/threaded" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "http://gleg.net/fprot.txt" }, { "name": "GLSA-200612-12", "tags": [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred" ], "url": "http://security.gentoo.org/glsa/glsa-200612-12.xml" }, { "name": "20061204 F-Prot Antivirus for Unix: heap overflow and Denial of Service", "tags": [ "mailing-list", "x_refsource_FULLDISC", "x_transferred" ], "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051096.html" }, { "name": "ADV-2006-4830", "tags": [ "vdb-entry", "x_refsource_VUPEN", "x_transferred" ], "url": "http://www.vupen.com/english/advisories/2006/4830" }, { "name": "2893", "tags": [ "exploit", "x_refsource_EXPLOIT-DB", "x_transferred" ], "url": "https://www.exploit-db.com/exploits/2893" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2006-11-15T00:00:00", "descriptions": [ { "lang": "en", "value": "Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code via a crafted CHM file. NOTE: this issue has at least a partial overlap with CVE-2006-6294." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2018-10-17T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "http://gleg.net/vulndisco_meta.shtml" }, { "name": "23328", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/23328" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://www.f-prot.com/news/gen_news/061201_release_unix467.html" }, { "name": "22879", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/22879" }, { "name": "30406", "tags": [ "vdb-entry", "x_refsource_OSVDB" ], "url": "http://www.osvdb.org/30406" }, { "name": "1017331", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://securitytracker.com/id?1017331" }, { "name": "21086", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/21086" }, { "name": "20061204 F-Prot Antivirus for Unix: heap overflow and Denial of Service", "tags": [ "mailing-list", "x_refsource_BUGTRAQ" ], "url": "http://www.securityfocus.com/archive/1/453475/100/0/threaded" }, { "tags": [ "x_refsource_MISC" ], "url": "http://gleg.net/fprot.txt" }, { "name": "GLSA-200612-12", "tags": [ "vendor-advisory", "x_refsource_GENTOO" ], "url": "http://security.gentoo.org/glsa/glsa-200612-12.xml" }, { "name": "20061204 F-Prot Antivirus for Unix: heap overflow and Denial of Service", "tags": [ "mailing-list", "x_refsource_FULLDISC" ], "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051096.html" }, { "name": "ADV-2006-4830", "tags": [ "vdb-entry", "x_refsource_VUPEN" ], "url": "http://www.vupen.com/english/advisories/2006/4830" }, { "name": "2893", "tags": [ "exploit", "x_refsource_EXPLOIT-DB" ], "url": "https://www.exploit-db.com/exploits/2893" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-6293", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code via a crafted CHM file. NOTE: this issue has at least a partial overlap with CVE-2006-6294." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "http://gleg.net/vulndisco_meta.shtml", "refsource": "MISC", "url": "http://gleg.net/vulndisco_meta.shtml" }, { "name": "23328", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/23328" }, { "name": "http://www.f-prot.com/news/gen_news/061201_release_unix467.html", "refsource": "CONFIRM", "url": "http://www.f-prot.com/news/gen_news/061201_release_unix467.html" }, { "name": "22879", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/22879" }, { "name": "30406", "refsource": "OSVDB", "url": "http://www.osvdb.org/30406" }, { "name": "1017331", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1017331" }, { "name": "21086", "refsource": "BID", "url": "http://www.securityfocus.com/bid/21086" }, { "name": "20061204 F-Prot Antivirus for Unix: heap overflow and Denial of Service", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/453475/100/0/threaded" }, { "name": "http://gleg.net/fprot.txt", "refsource": "MISC", "url": "http://gleg.net/fprot.txt" }, { "name": "GLSA-200612-12", "refsource": "GENTOO", "url": "http://security.gentoo.org/glsa/glsa-200612-12.xml" }, { "name": "20061204 F-Prot Antivirus for Unix: heap overflow and Denial of Service", "refsource": "FULLDISC", "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051096.html" }, { "name": "ADV-2006-4830", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/4830" }, { "name": "2893", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/2893" } ] } } } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-6293", "datePublished": "2006-12-05T11:00:00", "dateReserved": "2006-12-05T00:00:00", "dateUpdated": "2024-08-07T20:19:35.250Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2006-6293\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2006-12-05T11:28:00.000\",\"lastModified\":\"2024-11-21T00:22:22.110\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code via a crafted CHM file. NOTE: this issue has at least a partial overlap with CVE-2006-6294.\"},{\"lang\":\"es\",\"value\":\"Desbordamiento de b\u00fafer basado en mont\u00edculo en FRISK Software F-Prot Antivirus 3.16f anterior al 4.6.7 permite a atacantes con la intervenci\u00f3n del usuario ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de ficheros CHM manipulados. NOTA: Esta vulnerabilidad tiene, por lo menos una parte, solapada con la CVE-2006-6294.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":true,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"4.6.6\",\"matchCriteriaId\":\"CDF49B67-6377-404E-8C47-320B4C9C5299\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.11b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2E4EE92-115F-48B6-922C-264DDDFDD2CC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"040605DB-3DFB-4DF9-946B-D93AE02DB404\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.12a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9593E4C5-549D-433D-80CA-DF8138E6B4BE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.12b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D2F33BEF-B8B2-49BE-8B50-3D3771ABFD5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.12c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9E55BEF2-413C-4FC9-B18E-50813C6261C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.12d:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"747D2275-25A3-4D50-A200-A9C7C6A40492\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"06A14300-3A55-4BBD-8545-C3F935E5884C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.13a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"705BF0A5-9F2E-4981-B2B2-7E3B07DBA6B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA69A641-C8E7-47B3-8E4E-7147DFD7F45E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.14a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"60EEFB06-71E0-49FE-AFF5-45A56B8EB58F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.14b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B1DC4D8-BEE7-4C3D-A33A-2CA61CD1FAEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.14c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8A3B42D0-A722-41D4-A462-18F2209ACAF6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.14d:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"061C6A26-4ADB-4861-BA36-A7543B74EA8A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.14e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4FBCA221-E399-4B49-9740-38884F618C83\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"386A0CD6-4448-480D-9F30-A3451EEC55AA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.15a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4B4F752-3197-4E94-B563-F7342F2A6C3B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.15b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C6EAF4A-B549-4E51-9A05-22841BC1F5D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AC862A86-5F3A-4E6B-B7E6-3A59AC6EF0D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.16a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"497519D9-FE6A-4956-BBD2-B96F584F781B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.16b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"156C6D3E-ECAF-456D-BAB6-F3D20480FCE9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.16c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C22F9A01-6B1D-4CE6-B96D-A62891768618\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.16d:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"012133AA-983A-4C8E-BAD8-74446A5B13A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.16e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8D1F1043-767A-41E5-9A1C-A03BA53E795C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:f-prot:f-prot_antivirus:3.16f:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F2A3D4C5-11E7-4D8B-ABC9-E38D51702EA6\"}]}]}],\"references\":[{\"url\":\"http://gleg.net/fprot.txt\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://gleg.net/vulndisco_meta.shtml\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\"]},{\"url\":\"http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051096.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/22879\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/23328\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-200612-12.xml\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://securitytracker.com/id?1017331\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.f-prot.com/news/gen_news/061201_release_unix467.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.osvdb.org/30406\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/archive/1/453475/100/0/threaded\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/21086\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2006/4830\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.exploit-db.com/exploits/2893\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://gleg.net/fprot.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://gleg.net/vulndisco_meta.shtml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\"]},{\"url\":\"http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051096.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/22879\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/23328\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-200612-12.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://securitytracker.com/id?1017331\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.f-prot.com/news/gen_news/061201_release_unix467.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/30406\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/archive/1/453475/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/21086\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.vupen.com/english/advisories/2006/4830\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.exploit-db.com/exploits/2893\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}" } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.