CVE-2006-6496
The (1) VetMONNT.sys and (2) VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL buffers, which allows local users with administrative access to cause a…
Does this matter?
Lower severity and a low EPSS score (0.38%). Track it; it rarely justifies an emergency change on its own.
Description
The (1) VetMONNT.sys and (2) VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL buffers, which allows local users with administrative access to cause a denial of service (system crash) via certain IOCTLs.
- CVSS 2.0
- 6.6 MEDIUMAV:L/AC:M/Au:S/C:C/I:C/A:C
- EPSS
- 0.38% probability · 31th percentile
- CISA KEV
- Not listed
- Affected
- broadcom/etrust antivirus · broadcom/internet security suite
- Source
- cve@mitre.org
References
- http://crm.my-etrust.com/CIDocument.asp?KDId=2651&GUID=9FD7E4F8362C4A168D88B4FFA34DCB4C
- http://secunia.com/advisories/23378
- http://securitytracker.com/id?1017381
- http://securitytracker.com/id?1017382
- http://www.osvdb.org/30845
- http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=41
- http://www.securityfocus.com/archive/1/454420/100/0/threaded
- http://www.securityfocus.com/bid/21593
- http://www.vupen.com/english/advisories/2006/5010
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34870
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30909
- http://crm.my-etrust.com/CIDocument.asp?KDId=2651&GUID=9FD7E4F8362C4A168D88B4FFA34DCB4C
- http://secunia.com/advisories/23378
- http://securitytracker.com/id?1017381
- http://securitytracker.com/id?1017382
- http://www.osvdb.org/30845
- http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=41
- http://www.securityfocus.com/archive/1/454420/100/0/threaded
- http://www.securityfocus.com/bid/21593
- http://www.vupen.com/english/advisories/2006/5010
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34870
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30909
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.