CVE-2006-6490

Published: Feb 22, 2007Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HTML message.

Affected (6)

Products: Supportsoft: Scriptrunner, Smartissue · Symantec: Automated Support Assistant, Norton Antivirus, Norton Internet Security, Norton System Works

2 products

4 products

Automated Support Assistant

Norton Antivirus

Norton Internet Security

Norton System Works

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Supportsoft Scriptrunner	All versions
Supportsoft Smartissue	All versions
Symantec Automated Support Assistant	All versions
Symantec Norton Antivirus	Version 2006
Symantec Norton Internet Security	Version 2006
Symantec Norton System Works	Version 2006

References (34)

http://archives.neohapsis.com/archives/bugtraq/2007-02/0454.html

Source: cret@cert.org

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=478

Source: cret@cert.org

http://osvdb.org/33481

Source: cret@cert.org

http://osvdb.org/33482

Source: cret@cert.org

http://secunia.com/advisories/24246

Source: cret@cert.org

http://secunia.com/advisories/24251

Source: cret@cert.org

http://www.kb.cert.org/vuls/id/441785

Source: cret@cert.org

US Government Resource

http://www.securityfocus.com/archive/1/461147/100/0/threaded

Source: cret@cert.org

http://www.securityfocus.com/bid/22564

Source: cret@cert.org

http://www.securitytracker.com/id?1017688

Source: cret@cert.org

http://www.securitytracker.com/id?1017689

Source: cret@cert.org

http://www.securitytracker.com/id?1017690

Source: cret@cert.org

http://www.securitytracker.com/id?1017691

Source: cret@cert.org

http://www.symantec.com/avcenter/security/Content/2007.02.22.html

Source: cret@cert.org

Patch

http://www.vupen.com/english/advisories/2007/0703

Source: cret@cert.org

http://www.vupen.com/english/advisories/2007/0704

Source: cret@cert.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/32636

Source: cret@cert.org

http://archives.neohapsis.com/archives/bugtraq/2007-02/0454.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=478

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/33481

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/33482

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/24246

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/24251

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/441785

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.securityfocus.com/archive/1/461147/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/22564

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1017688

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1017689

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1017690

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1017691

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.symantec.com/avcenter/security/Content/2007.02.22.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.vupen.com/english/advisories/2007/0703

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/0704

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/32636

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.