Strix
26.1K

CVE-2006-4626

UnknownEPSS 4.58%

Last modified

CVE-2006-4626 is a vulnerability of currently unknown severity. Heap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869 allows remote attackers to execute arbitrary code via a crafted LHA file that contains extended headers with file and directory names whose concatenation triggers the overflow.. EPSS estimates a 4.58% chance of exploitation in the next 30 days.

Description

Heap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869 allows remote attackers to execute arbitrary code via a crafted LHA file that contains extended headers with file and directory names whose concatenation triggers the overflow.

Metrics

EPSS Probability
4.58%

90.4th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
AlwilAvast Antivirus<= 4.6.460
AlwilAvast Antivirus<= 4.6.763
AlwilAvast Antivirus4.0.168
AlwilAvast Antivirus4.0.172
AlwilAvast Antivirus4.0.183
AlwilAvast Antivirus4.0.202
AlwilAvast Antivirus4.0.211
AlwilAvast Antivirus4.0.229
AlwilAvast Antivirus4.0.235
AlwilAvast Antivirus4.1.260
AlwilAvast Antivirus4.1.268
AlwilAvast Antivirus4.1.278
AlwilAvast Antivirus4.1.287
AlwilAvast Antivirus4.1.289
AlwilAvast Antivirus4.1.304
AlwilAvast Antivirus4.1.319
AlwilAvast Antivirus4.1.335
AlwilAvast Antivirus4.1.342
AlwilAvast Antivirus4.1.357
AlwilAvast Antivirus4.1.389
AlwilAvast Antivirus4.1.396
AlwilAvast Antivirus4.1.412
AlwilAvast Antivirus4.1.418
AlwilAvast Antivirus4.1.501
AlwilAvast Antivirus4.5.518
AlwilAvast Antivirus4.5.549
AlwilAvast Antivirus4.5.561
AlwilAvast Antivirus4.6.603
AlwilAvast Antivirus4.6.623

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2006-4626?
Heap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869 allows remote attackers to execute arbitrary code via a crafted LHA file that contains extended headers with file and directory names whose concatenation triggers the overflow.
How severe is CVE-2006-4626?
Severity scoring for CVE-2006-4626 is pending analysis. The EPSS model estimates a 4.58% probability of exploitation in the next 30 days.
How do I fix CVE-2006-4626?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2006-4626?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST