CVE-2006-5403 : Stack-based buffer overflow in an ActiveX control used in Symantec Automated Sup

Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

Published 2006-10-19 01:07:00

Updated 2017-07-20 01:33:43

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute codeDenial of service

Products affected by CVE-2006-5403

Symantec » Norton Antivirus
cpe:2.3:a:symantec:norton_antivirus:*:*:*:*:*:*:*:*
Matching versions
Symantec » Norton Internet Security » Version: 2006
cpe:2.3:a:symantec:norton_internet_security:2006:*:*:*:*:*:*:*
Matching versions
Symantec » Norton System Works » Version: 2006
cpe:2.3:a:symantec:norton_system_works:2006:*:*:*:*:*:*:*
Matching versions
Symantec » Norton System Works » Version: 2005
cpe:2.3:a:symantec:norton_system_works:2005:*:*:*:*:*:*:*
Matching versions
Symantec » Automated Support Assistant
cpe:2.3:a:symantec:automated_support_assistant:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2006-5403

EPSS FAQ

9.10%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 95 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-5403

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.1	MEDIUM	AV:N/AC:H/Au:N/C:P/I:P/A:P	4.9	6.4	NIST
Access Vector: Network Access Complexity: High Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

References for CVE-2006-5403

Jump to

Vulnerability Details : CVE-2006-5403

Products affected by CVE-2006-5403

Exploit prediction scoring system (EPSS) score for CVE-2006-5403

CVSS scores for CVE-2006-5403

References for CVE-2006-5403