CVE-2006-6619

High

Description

AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB.

SeverityHigh
CVSS7.2
Exploit probability—
ProductAvg Antivirus Plus Firewall
PublishedDec 18, 2006
First seenDec 18, 2006

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
avg antivirus_plus_firewall7.5.431—
comodo comodo_personal_firewall2.3.6.81—
filseclab personal_firewall3.0.8686—
infoprocess antihook3.0.23—
soft4ever look_n_stop2.05p2—
symantec sygate_personal_firewall5.6.2808—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2006-6619 · Avg Antivirus Plus Firewall · Dark Radar