CVE-2006-6293 Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code via a crafted CHM file. NOTE: this issue has at least a parti...
HighCVSS 7.5
EPSS 17.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code via a crafted CHM file. NOTE: this issue has at least a partial overlap with CVE-2006-6294.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| f-prot antivirus | <= 4.6.6 | No fix listed |
| f-prot antivirus | = 3.11b | No fix listed |
| f-prot antivirus | = 3.12 | No fix listed |
| f-prot antivirus | = 3.12a | No fix listed |
| f-prot antivirus | = 3.12b | No fix listed |
| f-prot antivirus | = 3.12c | No fix listed |
| f-prot antivirus | = 3.12d | No fix listed |
| f-prot antivirus | = 3.13 | No fix listed |
| f-prot antivirus | = 3.13a | No fix listed |
| f-prot antivirus | = 3.14 | No fix listed |
| f-prot antivirus | = 3.14a | No fix listed |
| f-prot antivirus | = 3.14b | No fix listed |
| f-prot antivirus | = 3.14c | No fix listed |
| f-prot antivirus | = 3.14d | No fix listed |
| f-prot antivirus | = 3.14e | No fix listed |
| f-prot antivirus | = 3.15 | No fix listed |
| f-prot antivirus | = 3.15a | No fix listed |
| f-prot antivirus | = 3.15b | No fix listed |
| f-prot antivirus | = 3.16 | No fix listed |
| f-prot antivirus | = 3.16a | No fix listed |
| f-prot antivirus | = 3.16b | No fix listed |
| f-prot antivirus | = 3.16c | No fix listed |
| f-prot antivirus | = 3.16d | No fix listed |
| f-prot antivirus | = 3.16e | No fix listed |
| f-prot antivirus | = 3.16f | No fix listed |
References
- gleg.net
- gleg.net exploit
- 20061204 F-Prot Antivirus for Unix: heap overflow and Denial of Service mailing-list
- 22879 third-party-advisory vendor-advisory
- 23328 third-party-advisory vendor-advisory
- GLSA-200612-12 vendor-advisory
- 1017331 vdb-entry
- www.f-prot.com
- 30406 vdb-entry
- 20061204 F-Prot Antivirus for Unix: heap overflow and Denial of Service mailing-list
- 21086 patch vdb-entry vendor-advisory
- ADV-2006-4830 vdb-entry vendor-advisory
- 2893 exploit