medium6.4Public exploit code
CVE-2006-4438
Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary code via an…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Dr.Web AntiVirus 4.33 - LHA long Directory name Local Overflow2006-09-20 · local · linux · Verified
Impact
Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LHA archive with an extended header that contains a long directory name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Doctor Web Ltd | Dr.Web | through 4.33_for_linux |
References
- NVD record
- CVE.org record
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049552.html
- http://secunia.com/advisories/22019
- http://www.securityfocus.com/bid/20119
- http://www.vupen.com/english/advisories/2006/3719
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049552.html
- http://secunia.com/advisories/22019
- http://www.securityfocus.com/bid/20119
- http://www.vupen.com/english/advisories/2006/3719