CVE-2006-6490 Memory corruption in n/a
Remote attackers can execute arbitrary code via crafted HTML messages exploiting buffer overflows in SupportSoft ActiveX controls used by Symantec products.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2006-6490?
CVE-2006-6490 is a critical memory corruption vulnerability in Symantec Norton Antivirus, published on 22 Feb 2007. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HTML message.
Which versions are affected by CVE-2006-6490?
It affects 6 products.
Products include Supportsoft Scriptrunner, Supportsoft Smartissue, Symantec Automated Support Assistant, Symantec Norton Antivirus, Symantec Norton Internet Security, Symantec Norton System Works.
How do I fix CVE-2006-6490?
No fix has been published for CVE-2006-6490 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2006-6490 being exploited?
There is no known exploitation of CVE-2006-6490 in the wild and no public exploit code.
Sources
Also known as GHSA-qjhg-7vx8-5438.