CVE-2006-6496: broadcom etrust_antivirus
Vulnerability summary
CVE-2006-6496 is a medium (CVSS 6.6) vulnerability in broadcom etrust_antivirus. EPSS estimates a 0.38% chance of exploitation in the next 30 days, higher than 30.5% of scored vulnerabilities.
Timeline
- 13-12-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The (1) VetMONNT.sys and (2) VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL buffers, which allows local users with administrative access to cause a denial of service (system crash) via certain IOCTLs.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.38%
Chance of exploitation in the next 30 days
Percentile
31%
Versus all other CVEs
30-day change
0.00 pp
From 0.38% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Broadcom2 products
- etrust_antivirus8.1 | 8.2:beta
- internet_security_suite3.0
1 vendor · 2 products
References
11 links- www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34870X Refsource CONFIRM