CVE-2006-5937

Multiple integer overflows in Grisoft AVG Anti-Virus before 7.1.407 allow remote attackers to execute arbitrary code via crafted (1) CAB or (2) RAR archives that trigger a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.

• CWE-190

• http://marc.info/?l=full-disclosure&m=116343152030074&w=2Mailing List
• http://secunia.com/advisories/22811Patch, Vendor Advisory
• http://www.grisoft.com/doc/36365/lng/us/tpl/tpl01Patch, Product
• http://www.vupen.com/english/advisories/2006/4498Not Applicable
• http://marc.info/?l=full-disclosure&m=116343152030074&w=2Mailing List
• http://secunia.com/advisories/22811Patch, Vendor Advisory
• http://www.grisoft.com/doc/36365/lng/us/tpl/tpl01Patch, Product
• http://www.vupen.com/english/advisories/2006/4498Not Applicable

Published

Nov 16, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5931Multiple PHP remote file inclusion vulnerabilities in Aigaio…
• CVE-2006-5932Kahua before 0.7, when running multiple applications under a…
• CVE-2006-5933SQL injection vulnerability in update.asp in UltraSite 1.0 a…
• CVE-2006-5934SQL injection vulnerability in admin/default.asp in Estate A…
• CVE-2006-5935SQL injection vulnerability in index.php in ShopSystems 4.0 …
• CVE-2006-5936SQL injection vulnerability in dept.asp in SiteXpress E-Comm…
• CVE-2006-5938Grisoft AVG Anti-Virus before 7.1.407 has unknown impact and…
• CVE-2006-5939Grisoft AVG Anti-Virus before 7.1.407 allows remote attacker…
• CVE-2006-5940Unspecified vulnerability in Grisoft AVG Anti-Virus before 7…
• CVE-2006-5941Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2006-5942Cross-site scripting (XSS) vulnerability in inventory/displa…
• CVE-2006-5943Multiple SQL injection vulnerabilities in inventory/display/…