CVE-2006-6352

FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to cause a denial of service (infinite loop) via a crafted ACE file. NOTE: this issue has at least a partial overlap with CVE-2006-6294.

• http://gleg.net/fprot.txtExploit, Vendor Advisory
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051096.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/23328Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200612-12.xml
• http://securityreason.com/securityalert/1998
• http://securitytracker.com/id?1017331Vendor Advisory
• http://www.f-prot.com/news/gen_news/061201_release_unix467.htmlVendor Advisory
• http://www.securityfocus.com/archive/1/453475/100/0/threaded
• http://www.securityfocus.com/bid/21420Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30707
• https://www.exploit-db.com/exploits/2892
• http://gleg.net/fprot.txtExploit, Vendor Advisory
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051096.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/23328Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200612-12.xml
• http://securityreason.com/securityalert/1998
• http://securitytracker.com/id?1017331Vendor Advisory
• http://www.f-prot.com/news/gen_news/061201_release_unix467.htmlVendor Advisory
• http://www.securityfocus.com/archive/1/453475/100/0/threaded
• http://www.securityfocus.com/bid/21420Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30707
• https://www.exploit-db.com/exploits/2892

Published

Dec 7, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6346Unspecified vulnerability in SAP Internet Graphics Service (…
• CVE-2006-6347Unrestricted file upload vulnerability in TFT-Gallery allows…
• CVE-2006-6348Cross-site scripting (XSS) vulnerability in board.php in mow…
• CVE-2006-6349Multiple SQL injection vulnerabilities in PWP Technologies T…
• CVE-2006-6350listpics 5 stores sensitive data under the web root with ins…
• CVE-2006-6351KhaledMuratList stores sensitive data under the web root wit…
• CVE-2006-6353Multiple unspecified vulnerabilities in BOMArchiveHelper in …
• CVE-2006-6354Multiple SQL injection vulnerabilities in detail.asp in DuWa…
• CVE-2006-6355SQL injection vulnerability in default.asp in DuWare DuClass…
• CVE-2006-6356Multiple cross-site scripting (XSS) vulnerabilities in templ…
• CVE-2006-6357Cross-site scripting (XSS) vulnerability in templates/cat_te…
• CVE-2006-6358SQL injection vulnerability in the login function in auth.in…