CVE-2006-6293

F-Prot AntiVirus 4.6.6 - CHM Heap Overflow (PoC)

Severity Score

7.5

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code via a crafted CHM file. NOTE: this issue has at least a partial overlap with CVE-2006-6294.

Desbordamiento de búfer basado en montículo en FRISK Software F-Prot Antivirus 3.16f anterior al 4.6.7 permite a atacantes con la intervención del usuario ejecutar código de su elección a través de ficheros CHM manipulados. NOTA: Esta vulnerabilidad tiene, por lo menos una parte, solapada con la CVE-2006-6294.

*Credits: N/A

CVSS Scores

NISTv2 7.5

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-12-05 CVE Reserved
2006-12-05 CVE Published
2024-03-10 EPSS Updated
2024-08-07 CVE Updated
2024-08-07 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (13)

URL	Tag	Source
http://gleg.net/fprot.txt	X_refsource_misc
http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051096.html	Mailing List
http://securitytracker.com/id?1017331	Vdb Entry
http://www.f-prot.com/news/gen_news/061201_release_unix467.html	X_refsource_confirm
http://www.osvdb.org/30406	Vdb Entry
http://www.securityfocus.com/archive/1/453475/100/0/threaded	Mailing List

URL	Date	SRC
https://www.exploit-db.com/exploits/2893	2024-08-07
http://gleg.net/vulndisco_meta.shtml	2024-08-07

URL	Date	SRC
http://www.securityfocus.com/bid/21086	2018-10-17

URL	Date	SRC
http://secunia.com/advisories/22879	2018-10-17
http://secunia.com/advisories/23328	2018-10-17
http://security.gentoo.org/glsa/glsa-200612-12.xml	2018-10-17
http://www.vupen.com/english/advisories/2006/4830	2018-10-17

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				<= 4.6.6 Search vendor "F-prot" for product "F-prot Antivirus" and version " <= 4.6.6"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.11b Search vendor "F-prot" for product "F-prot Antivirus" and version "3.11b"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.12 Search vendor "F-prot" for product "F-prot Antivirus" and version "3.12"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.12a Search vendor "F-prot" for product "F-prot Antivirus" and version "3.12a"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.12b Search vendor "F-prot" for product "F-prot Antivirus" and version "3.12b"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.12c Search vendor "F-prot" for product "F-prot Antivirus" and version "3.12c"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.12d Search vendor "F-prot" for product "F-prot Antivirus" and version "3.12d"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.13 Search vendor "F-prot" for product "F-prot Antivirus" and version "3.13"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.13a Search vendor "F-prot" for product "F-prot Antivirus" and version "3.13a"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.14 Search vendor "F-prot" for product "F-prot Antivirus" and version "3.14"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.14a Search vendor "F-prot" for product "F-prot Antivirus" and version "3.14a"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.14b Search vendor "F-prot" for product "F-prot Antivirus" and version "3.14b"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.14c Search vendor "F-prot" for product "F-prot Antivirus" and version "3.14c"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.14d Search vendor "F-prot" for product "F-prot Antivirus" and version "3.14d"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.14e Search vendor "F-prot" for product "F-prot Antivirus" and version "3.14e"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.15 Search vendor "F-prot" for product "F-prot Antivirus" and version "3.15"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.15a Search vendor "F-prot" for product "F-prot Antivirus" and version "3.15a"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.15b Search vendor "F-prot" for product "F-prot Antivirus" and version "3.15b"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.16 Search vendor "F-prot" for product "F-prot Antivirus" and version "3.16"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.16a Search vendor "F-prot" for product "F-prot Antivirus" and version "3.16a"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.16b Search vendor "F-prot" for product "F-prot Antivirus" and version "3.16b"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.16c Search vendor "F-prot" for product "F-prot Antivirus" and version "3.16c"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.16d Search vendor "F-prot" for product "F-prot Antivirus" and version "3.16d"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.16e Search vendor "F-prot" for product "F-prot Antivirus" and version "3.16e"		-		Affected
F-prot Search vendor "F-prot"		F-prot Antivirus Search vendor "F-prot" for product "F-prot Antivirus"				3.16f Search vendor "F-prot" for product "F-prot Antivirus" and version "3.16f"		-		Affected