CVE-2006-3223: High severity broadcom etrust antivirus vulnerability
Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a scan job with format strings in the description field.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3223?
CVE-2006-3223 is considered a high severity vulnerability due to its potential to allow denial of service and arbitrary code execution.
How do I fix CVE-2006-3223?
To fix CVE-2006-3223, users should apply the latest security patches provided by Broadcom for eTrust Antivirus, eTrust PestPatrol, and Integrated Threat Management.
Which software is affected by CVE-2006-3223?
CVE-2006-3223 affects Broadcom eTrust Antivirus, eTrust PestPatrol, and Integrated Threat Management, all version 8.0.
What type of attack does CVE-2006-3223 facilitate?
CVE-2006-3223 facilitates attacks that can lead to denial of service and potentially allow attackers to execute arbitrary code.
Is there a risk of data loss with CVE-2006-3223?
Yes, exploitation of CVE-2006-3223 could result in data loss due to potential arbitrary code execution and system crashes.