CVE-2006-4438

Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LHA archive with an extended header that contains a long directory name.

CVSS v2.0 NVD

6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS

10.70% chance of exploitation in the next 30 days, 96th percentile

Published

2006-09-20

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/2404

Security advisories

• http://secunia.com/advisories/22019
• http://www.securityfocus.com/bid/20119

References

• CVE Record
• NVD entry