fkie_cve-2006-6490
Vulnerability from fkie_nvd
Published
2007-02-22 21:28
Modified
2025-04-09 00:30
Severity ?
Summary
Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HTML message.
References
cret@cert.orghttp://archives.neohapsis.com/archives/bugtraq/2007-02/0454.html
cret@cert.orghttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=478
cret@cert.orghttp://osvdb.org/33481
cret@cert.orghttp://osvdb.org/33482
cret@cert.orghttp://secunia.com/advisories/24246
cret@cert.orghttp://secunia.com/advisories/24251
cret@cert.orghttp://www.kb.cert.org/vuls/id/441785US Government Resource
cret@cert.orghttp://www.securityfocus.com/archive/1/461147/100/0/threaded
cret@cert.orghttp://www.securityfocus.com/bid/22564
cret@cert.orghttp://www.securitytracker.com/id?1017688
cret@cert.orghttp://www.securitytracker.com/id?1017689
cret@cert.orghttp://www.securitytracker.com/id?1017690
cret@cert.orghttp://www.securitytracker.com/id?1017691
cret@cert.orghttp://www.symantec.com/avcenter/security/Content/2007.02.22.htmlPatch
cret@cert.orghttp://www.vupen.com/english/advisories/2007/0703
cret@cert.orghttp://www.vupen.com/english/advisories/2007/0704
cret@cert.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/32636
af854a3a-2127-422b-91ae-364da2661108http://archives.neohapsis.com/archives/bugtraq/2007-02/0454.html
af854a3a-2127-422b-91ae-364da2661108http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=478
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/33481
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/33482
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/24246
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/24251
af854a3a-2127-422b-91ae-364da2661108http://www.kb.cert.org/vuls/id/441785US Government Resource
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/461147/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/22564
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1017688
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1017689
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1017690
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1017691
af854a3a-2127-422b-91ae-364da2661108http://www.symantec.com/avcenter/security/Content/2007.02.22.htmlPatch
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2007/0703
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2007/0704
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/32636
Impacted products
Vendor Product Version
supportsoft scriptrunner *
supportsoft smartissue *
symantec automated_support_assistant *
symantec norton_antivirus 2006
symantec norton_internet_security 2006
symantec norton_system_works 2006


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:supportsoft:scriptrunner:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "98D33388-F9B0-4901-AB69-D68BB3856336",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:supportsoft:smartissue:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "81D23C4B-6BD4-4355-8F5E-793EBFB6C19A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:symantec:automated_support_assistant:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F8B0CDB6-4DB2-4F75-B408-7E8EC39446FD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:symantec:norton_antivirus:2006:*:*:*:*:*:*:*",
              "matchCriteriaId": "44843812-35FC-4378-B239-EEC74A0C8A39",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:symantec:norton_internet_security:2006:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1CC64B1-772C-42A9-9B0A-08CA92DC87E4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:symantec:norton_system_works:2006:*:*:*:*:*:*:*",
              "matchCriteriaId": "05EB078C-2538-4961-ABFF-6C4601C3977F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HTML message."
    },
    {
      "lang": "es",
      "value": "M\u00faltiples desbordamiento de b\u00fafer en los controles ActiveX de SupportSoft (1) SmartIssue (tgctlsi.dll) y (2) ScriptRunner (tgctlsr.dll), tal y como se usan en Symantec Automated Support Assistant y Norton AntiVirus, Internet Security, y System Works 2006, permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante un mensaje HTML manipulado."
    }
  ],
  "id": "CVE-2006-6490",
  "lastModified": "2025-04-09T00:30:58.490",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 10.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2007-02-22T21:28:00.000",
  "references": [
    {
      "source": "cret@cert.org",
      "url": "http://archives.neohapsis.com/archives/bugtraq/2007-02/0454.html"
    },
    {
      "source": "cret@cert.org",
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=478"
    },
    {
      "source": "cret@cert.org",
      "url": "http://osvdb.org/33481"
    },
    {
      "source": "cret@cert.org",
      "url": "http://osvdb.org/33482"
    },
    {
      "source": "cret@cert.org",
      "url": "http://secunia.com/advisories/24246"
    },
    {
      "source": "cret@cert.org",
      "url": "http://secunia.com/advisories/24251"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/441785"
    },
    {
      "source": "cret@cert.org",
      "url": "http://www.securityfocus.com/archive/1/461147/100/0/threaded"
    },
    {
      "source": "cret@cert.org",
      "url": "http://www.securityfocus.com/bid/22564"
    },
    {
      "source": "cret@cert.org",
      "url": "http://www.securitytracker.com/id?1017688"
    },
    {
      "source": "cret@cert.org",
      "url": "http://www.securitytracker.com/id?1017689"
    },
    {
      "source": "cret@cert.org",
      "url": "http://www.securitytracker.com/id?1017690"
    },
    {
      "source": "cret@cert.org",
      "url": "http://www.securitytracker.com/id?1017691"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.symantec.com/avcenter/security/Content/2007.02.22.html"
    },
    {
      "source": "cret@cert.org",
      "url": "http://www.vupen.com/english/advisories/2007/0703"
    },
    {
      "source": "cret@cert.org",
      "url": "http://www.vupen.com/english/advisories/2007/0704"
    },
    {
      "source": "cret@cert.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32636"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://archives.neohapsis.com/archives/bugtraq/2007-02/0454.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=478"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/33481"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/33482"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/24246"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/24251"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/441785"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/461147/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/22564"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1017688"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1017689"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1017690"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1017691"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.symantec.com/avcenter/security/Content/2007.02.22.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/0703"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/0704"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32636"
    }
  ],
  "sourceIdentifier": "cret@cert.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.