CVE-2006-6352

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to cause a denial of service (infinite loop) via a crafted ACE file. NOTE: this issue has at least a partial overlap with CVE-2006-6294.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://gleg.net/fprot.txtExploit, Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051096.htmlExploit, Vendor Advisory
http://secunia.com/advisories/23328Vendor Advisory
http://security.gentoo.org/glsa/glsa-200612-12.xml
http://securityreason.com/securityalert/1998
http://securitytracker.com/id?1017331Vendor Advisory
http://www.f-prot.com/news/gen_news/061201_release_unix467.htmlVendor Advisory
http://www.securityfocus.com/archive/1/453475/100/0/threaded
http://www.securityfocus.com/bid/21420Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30707
https://www.exploit-db.com/exploits/2892
http://gleg.net/fprot.txtExploit, Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051096.htmlExploit, Vendor Advisory
http://secunia.com/advisories/23328Vendor Advisory
http://security.gentoo.org/glsa/glsa-200612-12.xml
http://securityreason.com/securityalert/1998
http://securitytracker.com/id?1017331Vendor Advisory
http://www.f-prot.com/news/gen_news/061201_release_unix467.htmlVendor Advisory
http://www.securityfocus.com/archive/1/453475/100/0/threaded
http://www.securityfocus.com/bid/21420Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30707
https://www.exploit-db.com/exploits/2892

Timeline

Published: Dec 7, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-63535.0Multiple unspecified vulnerabilities in BOMArchiveHelper in Mac OS X allow user-assisted remote attackers to cause a denial of service (appl CVE-2006-63547.5Multiple SQL injection vulnerabilities in detail.asp in DuWare DuNews allow remote attackers to execute arbitrary SQL commands via the (1) i CVE-2006-635510.0SQL injection vulnerability in default.asp in DuWare DuClassmate allows remote attackers to execute arbitrary SQL commands via the iCity par CVE-2006-63566.8Multiple cross-site scripting (XSS) vulnerabilities in templates/link_temp.php in PHPNews 1.3.0 allow remote attackers to inject arbitrary w CVE-2006-63576.8Cross-site scripting (XSS) vulnerability in templates/cat_temp.php in PHPNews 1.3.0 and earlier allows remote attackers to inject arbitrary CVE-2006-63587.5SQL injection vulnerability in the login function in auth.inc in Stefan Frech online-bookmarks 0.6.12 allows remote attackers to execute arb CVE-2006-63596.8Cross-site scripting (XSS) vulnerability in Stefan Frech online-bookmarks 0.6.12 allows remote attackers to inject arbitrary web script or H CVE-2006-63607.5PHP remote file inclusion vulnerability in activate.php in PHP Upload Center 2.0 allows remote attackers to execute arbitrary PHP code via a CVE-2006-636110.0Heap-based buffer overflow in the uploadprogress_php_rfc1867_file function in uploadprogress.c in Bitflux Upload Progress Meter before 8276 CVE-2006-63636.8Cross-site scripting (XSS) vulnerability in admin.pl in BlueSocket Secure Controller (BSC) before 5.2, or without 5.1.1-BluePatch, allows re CVE-2006-63646.8Cross-site scripting (XSS) vulnerability in error.php in Inside Systems Mail (ISMail) 2.0 and earlier allows remote attackers to inject arbi CVE-2006-63657.5SQL injection vulnerability in detail.asp in DUware DUpaypal 3.1, and possibly earlier, allows remote attackers to execute arbitrary SQL com