CVE-2006-6496: Medium severity Broadcom Etrust Antivirus vulnerability
The (1) VetMONNT.sys and (2) VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL buffers, which allows local users with administrative access to cause a denial of service (system crash) via certain IOCTLs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6496?
CVE-2006-6496 has a high severity due to its potential to cause a system crash when exploited.
How do I fix CVE-2006-6496?
To fix CVE-2006-6496, update your CA Anti-Virus or Internet Security Suite to the latest version that addresses this vulnerability.
Which products are affected by CVE-2006-6496?
CVE-2006-6496 affects CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0.
What triggers the vulnerability in CVE-2006-6496?
The vulnerability in CVE-2006-6496 is triggered by improper handling of NULL buffers within the affected drivers.
Are local user privileges required to exploit CVE-2006-6496?
Yes, local user privileges with administrative access are required to exploit CVE-2006-6496.