CVEvulnerability

CVE-2006-6490

10.0 HIGH Published 2007-02-22 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-02-22
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HTML message.

Affected configurations

• supportsoft scriptrunner • supportsoft smartissue • symantec automated support assistant • symantec norton antivirus 2006 • symantec norton internet security 2006 • symantec norton system works 2006

References