Vulnerability Description
Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HTML message.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Supportsoft | Scriptrunner | All versions |
| Supportsoft | Smartissue | All versions |
| Symantec | Automated Support Assistant | All versions |
| Symantec | Norton Antivirus | 2006 |
| Symantec | Norton Internet Security | 2006 |
| Symantec | Norton System Works | 2006 |
References
- http://archives.neohapsis.com/archives/bugtraq/2007-02/0454.html
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=478
- http://osvdb.org/33481
- http://osvdb.org/33482
- http://secunia.com/advisories/24246
- http://secunia.com/advisories/24251
- http://www.kb.cert.org/vuls/id/441785US Government Resource
- http://www.securityfocus.com/archive/1/461147/100/0/threaded
- http://www.securityfocus.com/bid/22564
- http://www.securitytracker.com/id?1017688
- http://www.securitytracker.com/id?1017689
- http://www.securitytracker.com/id?1017690
- http://www.securitytracker.com/id?1017691
- http://www.symantec.com/avcenter/security/Content/2007.02.22.htmlPatch
- http://www.vupen.com/english/advisories/2007/0703
FAQ
What is CVE-2006-6490?
CVE-2006-6490 is a vulnerability with a CVSS score of 10.0 (HIGH). Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Int...
How severe is CVE-2006-6490?
CVE-2006-6490 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2006-6490?
Check the references section above for vendor advisories and patch information. Affected products include: Supportsoft Scriptrunner, Supportsoft Smartissue, Symantec Automated Support Assistant, Symantec Norton Antivirus, Symantec Norton Internet Security.