CVE-2006-6490
Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HTML message.
Published:Feb 22, 2007
Last Modified:Apr 23, 2026
EPS:Feb 22, 2007
EPSS Score:0.33469
CVSS Score:10
Affected Products
Vendor
Product
Action
Vendor
Supportsoft
Product
Scriptrunner
Supportsoft
Scriptrunner
Vendor
Supportsoft
Product
Smartissue
Supportsoft
Smartissue
Vendor
Symantec
Product
Automated Support Assistant
Symantec
Automated Support Assistant
Vendor
Symantec
Product
Norton Antivirus
Symantec
Norton Antivirus
Vendor
Symantec
Product
Norton Internet Security
Symantec
Norton Internet Security
Vendor
Symantec
Product
Norton System Works
Symantec
Norton System Works
Exploits
No exploit reference
Common Weakness Enumeration
No CWE recorded yet
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
