CVE-2006-6490: Buffer Overflow
Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HTML message.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6490?
CVE-2006-6490 has a high severity due to its potential to allow remote attackers to execute arbitrary code.
How do I fix CVE-2006-6490?
To fix CVE-2006-6490, ensure that you update your Symantec software to the latest version that addresses this vulnerability.
What products are affected by CVE-2006-6490?
CVE-2006-6490 affects SupportSoft SmartIssue, ScriptRunner ActiveX controls, and several Symantec products including Norton AntiVirus 2006.
Can CVE-2006-6490 be exploited remotely?
Yes, CVE-2006-6490 can be exploited remotely by attackers through specially crafted inputs.
Is CVE-2006-6490 a zero-day vulnerability?
CVE-2006-6490 is not a zero-day vulnerability since it was disclosed publicly and patches were made available after its discovery.