CVE-2006-4626

Severity Score

7.8

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Heap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869 allows remote attackers to execute arbitrary code via a crafted LHA file that contains extended headers with file and directory names whose concatenation triggers the overflow.

Desbordamiento de búfer basado en montículo en alwil avast! Anti-virus Engine anterior a 4.7.869 permite a atacantes remotos ejecutar código de su elección mediante un archivo LHA artesanal que contiene cabeceras extendidas con nombres de archivos y directorios cuya concatenación dispara el desbordamiento.

*Credits: N/A

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-09-07 CVE Reserved
2006-09-07 CVE Published
2024-08-07 CVE Updated
2024-08-07 First Exploit
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (4)

URL	Tag	Source
http://secunia.com/advisories/21794	Third Party Advisory
http://www.securityfocus.com/bid/19903	Vdb Entry
http://www.vupen.com/english/advisories/2006/3515	Vdb Entry

URL	Date	SRC
http://www.hustlelabs.com/advisories/04072006_alwil.pdf	2024-08-07

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				<= 4.6.460 Search vendor "Alwil" for product "Avast Antivirus" and version " <= 4.6.460"		server		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				<= 4.6.763 Search vendor "Alwil" for product "Avast Antivirus" and version " <= 4.6.763"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.0.168 Search vendor "Alwil" for product "Avast Antivirus" and version "4.0.168"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.0.172 Search vendor "Alwil" for product "Avast Antivirus" and version "4.0.172"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.0.183 Search vendor "Alwil" for product "Avast Antivirus" and version "4.0.183"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.0.202 Search vendor "Alwil" for product "Avast Antivirus" and version "4.0.202"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.0.211 Search vendor "Alwil" for product "Avast Antivirus" and version "4.0.211"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.0.229 Search vendor "Alwil" for product "Avast Antivirus" and version "4.0.229"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.0.235 Search vendor "Alwil" for product "Avast Antivirus" and version "4.0.235"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.1.260 Search vendor "Alwil" for product "Avast Antivirus" and version "4.1.260"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.1.268 Search vendor "Alwil" for product "Avast Antivirus" and version "4.1.268"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.1.278 Search vendor "Alwil" for product "Avast Antivirus" and version "4.1.278"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.1.287 Search vendor "Alwil" for product "Avast Antivirus" and version "4.1.287"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.1.289 Search vendor "Alwil" for product "Avast Antivirus" and version "4.1.289"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.1.304 Search vendor "Alwil" for product "Avast Antivirus" and version "4.1.304"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.1.319 Search vendor "Alwil" for product "Avast Antivirus" and version "4.1.319"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.1.335 Search vendor "Alwil" for product "Avast Antivirus" and version "4.1.335"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.1.342 Search vendor "Alwil" for product "Avast Antivirus" and version "4.1.342"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.1.357 Search vendor "Alwil" for product "Avast Antivirus" and version "4.1.357"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.1.389 Search vendor "Alwil" for product "Avast Antivirus" and version "4.1.389"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.1.396 Search vendor "Alwil" for product "Avast Antivirus" and version "4.1.396"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.1.412 Search vendor "Alwil" for product "Avast Antivirus" and version "4.1.412"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.1.418 Search vendor "Alwil" for product "Avast Antivirus" and version "4.1.418"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.1.501 Search vendor "Alwil" for product "Avast Antivirus" and version "4.1.501"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.5.518 Search vendor "Alwil" for product "Avast Antivirus" and version "4.5.518"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.5.549 Search vendor "Alwil" for product "Avast Antivirus" and version "4.5.549"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.5.561 Search vendor "Alwil" for product "Avast Antivirus" and version "4.5.561"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.6.603 Search vendor "Alwil" for product "Avast Antivirus" and version "4.6.603"		-		Affected
Alwil Search vendor "Alwil"		Avast Antivirus Search vendor "Alwil" for product "Avast Antivirus"				4.6.623 Search vendor "Alwil" for product "Avast Antivirus" and version "4.6.623"		-		Affected