CVE-2006-4626

Published: Sep 7, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869 allows remote attackers to execute arbitrary code via a crafted LHA file that contains extended headers with file and directory names whose concatenation triggers the overflow.

Affected (29)

Products: Alwil: Avast Antivirus

Alwil

1 product

Avast Antivirus

Configuration A

29 vulnerable

Vulnerable Software	Affected Versions
Alwil Avast Antivirus	Up to 4.6.763
Alwil Avast Antivirus	Up to 4.6.460
Alwil Avast Antivirus	Version 4.0.168
Alwil Avast Antivirus	Version 4.0.172
Alwil Avast Antivirus	Version 4.0.183
Alwil Avast Antivirus	Version 4.0.202
Alwil Avast Antivirus	Version 4.0.211
Alwil Avast Antivirus	Version 4.0.229
Alwil Avast Antivirus	Version 4.0.235
Alwil Avast Antivirus	Version 4.1.260
Alwil Avast Antivirus	Version 4.1.268
Alwil Avast Antivirus	Version 4.1.278
Alwil Avast Antivirus	Version 4.1.287
Alwil Avast Antivirus	Version 4.1.289
Alwil Avast Antivirus	Version 4.1.304
Alwil Avast Antivirus	Version 4.1.319
Alwil Avast Antivirus	Version 4.1.335
Alwil Avast Antivirus	Version 4.1.342
Alwil Avast Antivirus	Version 4.1.357
Alwil Avast Antivirus	Version 4.1.389
Alwil Avast Antivirus	Version 4.1.396
Alwil Avast Antivirus	Version 4.1.412
Alwil Avast Antivirus	Version 4.1.418
Alwil Avast Antivirus	Version 4.1.501
Alwil Avast Antivirus	Version 4.5.518
Alwil Avast Antivirus	Version 4.5.549
Alwil Avast Antivirus	Version 4.5.561
Alwil Avast Antivirus	Version 4.6.603
Alwil Avast Antivirus	Version 4.6.623