Vulnerability Name:

CVE-2006-5403 (CCN-29363)

Assigned:2006-10-05
Published:2006-10-05
Updated:2017-07-20
Summary:Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
CVSS v3 Severity:9.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:5.1 Medium (CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P)
3.8 Low (Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
7.6 High (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C)
5.6 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-Other
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2006-5403

Source: CCN
Type: SA22228
Symantec Support Tool ActiveX Control Vulnerabilities

Source: SECUNIA
Type: Vendor Advisory
22228

Source: CCN
Type: SYM06-019
Symantec Automated Support Assistant: Vulnerabilities in Support Tool ActiveX Control

Source: CONFIRM
Type: UNKNOWN
http://securityresponse.symantec.com/avcenter/security/Content/2006.10.05.html

Source: CCN
Type: SECTRACK ID: 1016988
Symantec Automated Support Assistant Active X Control Stack Overflow Lets Remote Users Execute Arbitrary Code

Source: SECTRACK
Type: UNKNOWN
1016988

Source: CCN
Type: SECTRACK ID: 1016989
Symantec Norton System Works Active X Control Stack Overflow Lets Remote Users Execute Arbitrary Code

Source: SECTRACK
Type: UNKNOWN
1016989

Source: CCN
Type: SECTRACK ID: 1016990
Symantec Norton Internet Security Active X Control Stack Overflow Lets Remote Users Execute Arbitrary Code

Source: SECTRACK
Type: UNKNOWN
1016990

Source: CCN
Type: SECTRACK ID: 1016991
Symantec Norton Anti-Virus Active X Control Stack Overflow Lets Remote Users Execute Arbitrary Code

Source: SECTRACK
Type: UNKNOWN
1016991

Source: CCN
Type: US-CERT VU#400601
Symantec Automated Support Assistant ActiveX control buffer overflow

Source: CERT-VN
Type: US Government Resource
VU#400601

Source: CCN
Type: OSVDB ID: 29584
Symantec Multiple Products Support Assistant ActiveX Overflow

Source: BID
Type: UNKNOWN
20348

Source: CCN
Type: BID-20348
Symantec Automated Support Assistant ActiveX Control Buffer Overflow Vulnerability

Source: VUPEN
Type: UNKNOWN
ADV-2006-3929

Source: XF
Type: UNKNOWN
symantec-support-tool-activex-bo(29363)

Source: XF
Type: UNKNOWN
symantec-support-tool-activex-bo(29363)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:symantec:automated_support_assistant:*:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:norton_antivirus:*:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:norton_internet_security:2006:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:norton_system_works:2005:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:norton_system_works:2006:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:symantec:norton_antivirus:2005:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:norton_internet_security:2005:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:norton_system_works:2005:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:norton_system_works:2006:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:norton_antivirus:2006:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:automated_support_assistant:*:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:norton_internet_security:2006:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    symantec automated support assistant *
    symantec norton antivirus *
    symantec norton internet security 2006
    symantec norton system works 2005
    symantec norton system works 2006
    symantec norton antivirus 2005
    symantec norton internet security 2005
    symantec norton system works 2005
    symantec norton system works 2006
    symantec norton antivirus 2006
    symantec automated support assistant *
    symantec norton internet security 2006