CVE-2006-4438 EXPLOIT
6.4
MEDIUM · CVSS 2.0 · EPSS 10.5% (pctl 96)
Patch early
A public exploit exists.
Description
Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LHA archive with an extended header that contains a long directory name.
Scoring
| CVSS | 6.4 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:N |
| EPSS | 10.5% — more likely to be exploited than 96% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2006-09-20 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| doctor web ltd | dr.web |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Dr.Web AntiVirus 4.33 - LHA long Directory name Local Overflow | 2006-09-20 |
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049552.html
- http://secunia.com/advisories/22019
- http://www.securityfocus.com/bid/20119
- http://www.vupen.com/english/advisories/2006/3719
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049552.html
- http://secunia.com/advisories/22019
- http://www.securityfocus.com/bid/20119
- http://www.vupen.com/english/advisories/2006/3719
→ the Explorer · watch your stack · NVD