CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-6490

Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HTML message.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.233

EPSS Ranking 95.6%

CVSS Severity

CVSS v2 Score 10.0

References

Products affected by CVE-2006-6490

Supportsoft » Scriptrunner » Version: Any

cpe:2.3:a:supportsoft:scriptrunner:*
Supportsoft » Smartissue » Version: Any

cpe:2.3:a:supportsoft:smartissue:*
Symantec » Automated Support Assistant » Version: N/A

cpe:2.3:a:symantec:automated_support_assistant:-
Symantec » Norton Antivirus » Version: 2006

cpe:2.3:a:symantec:norton_antivirus:2006
Symantec » Norton Internet Security » Version: 2006

cpe:2.3:a:symantec:norton_internet_security:2006
Symantec » Norton System Works » Version: 2006

cpe:2.3:a:symantec:norton_system_works:2006

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2006-6490

Products

Pricing

Contact Us