CVE-2006-5937

Опубликовано: 16 нояб. 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Multiple integer overflows in Grisoft AVG Anti-Virus before 7.1.407 allow remote attackers to execute arbitrary code via crafted (1) CAB or (2) RAR archives that trigger a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.

Ссылки

http://marc.info/?l=full-disclosure&m=116343152030074&w=2
Mailing List
http://secunia.com/advisories/22811
Patch
Vendor Advisory
http://www.grisoft.com/doc/36365/lng/us/tpl/tpl01
Patch
Product
http://www.vupen.com/english/advisories/2006/4498
Not Applicable
http://marc.info/?l=full-disclosure&m=116343152030074&w=2
Mailing List
http://secunia.com/advisories/22811
Patch
Vendor Advisory
http://www.grisoft.com/doc/36365/lng/us/tpl/tpl01
Patch
Product
http://www.vupen.com/english/advisories/2006/4498
Not Applicable

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:grisoft:avg_antivirus:7.0:*:*:*:*:*:*:*

cpe:2.3:a:grisoft:avg_antivirus:7.0.251:*:*:*:*:*:*:*

cpe:2.3:a:grisoft:avg_antivirus:7.0.323:*:*:*:*:*:*:*

cpe:2.3:a:grisoft:avg_antivirus:7.1.308:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04255

Низкий

7.5 High

CVSS2

Дефекты

CWE-190

Связанные уязвимости

GHSA-hgw5-vqrc-22m5

github

почти 4 года назад