CVE-2006-6496
Last modified
CVE-2006-6496 is a vulnerability of currently unknown severity. The (1) VetMONNT.sys and (2) VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL buffers, which allows local users with administrative access to cause a denial of service (system crash) via certain IOCTLs.. EPSS estimates a 0.36% chance of exploitation in the next 30 days.
Description
The (1) VetMONNT.sys and (2) VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL buffers, which allows local users with administrative access to cause a denial of service (system crash) via certain IOCTLs.
Metrics
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Broadcom | Etrust Antivirus | 8.1 | — |
| Broadcom | Etrust Antivirus | 8.2 | Beta |
| Broadcom | Internet Security Suite | 3.0 | — |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-6496?
How severe is CVE-2006-6496?
How do I fix CVE-2006-6496?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-6490Multiple buffer overflows in the SupportSoft (1) SmartIssue …
- CVE-2006-6491Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2006-6492Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2006-6493Buffer overflow in the krbv4_ldap_auth function in servers/s…
- CVE-2006-6494Directory traversal vulnerability in ld.so.1 in Sun Solaris …
- CVE-2006-6495Stack-based buffer overflow in ld.so.1 in Sun Solaris 8, 9, …
- CVE-2006-6497Multiple unspecified vulnerabilities in the layout engine fo…
- CVE-2006-6498Multiple unspecified vulnerabilities in the JavaScript engin…
- CVE-2006-6499The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, …
- CVE-2006-6500Heap-based buffer overflow in Mozilla Firefox 2.x before 2.0…
- CVE-2006-6501Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.…
- CVE-2006-6502Use-after-free vulnerability in the LiveConnect bridge code …
Are you affected by CVE-2006-6496?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST