CVEvulnerability
CVE-2006-4438
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-09-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Description
Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LHA archive with an extended header that contains a long directory name.
Affected configurations
• doctor web ltd dr.web (<= 4.33 for linux)
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049552.html lists.grok.org.uk
- http://secunia.com/advisories/22019 Vendor Advisory
- http://www.securityfocus.com/bid/20119 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/3719 www.vupen.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049552.html lists.grok.org.uk
- http://secunia.com/advisories/22019 Vendor Advisory
- http://www.securityfocus.com/bid/20119 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/3719 www.vupen.com