Back to Database
Status published
High
CVE-2006-4626
Heap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869...
Vulnerability Description
Heap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869 allows remote attackers to execute arbitrary code via a crafted LHA file that contains extended headers with file and directory names whose concatenation triggers the overflow.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-4626
Credits & Attribution
No credits recorded in the NVD database.
References
More from alwil
View All →CVE-2007-0829
avast! Server Edition before 4.7.726 does not demand a password...
Medium
4.4
CVE-2006-2869
Unspecified vulnerability in the CHM unpacker in avast! before 4.7.844...
Critical
10
CVE-2006-1892
avast! 4 Linux Home Edition 1.0.5 allows local users to...
Medium
4.9
CVE-2006-1355
avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical...
High
7.2
CVE-2005-3214
Multiple interpretation error in unspecified versions of Avast Antivirus allows...
Medium
5.1
Affected Vendor
alwil
View all reports →Affected Software
avast antivirus
Vulnerable Versions:
0, 4.0.168, 4.0.172, 4.0.183, 4.0.202, 4.0.211, 4.0.229, 4.0.235, 4.1.260, 4.1.268, 4.1.278, 4.1.287, 4.1.289, 4.1.304, 4.1.319, 4.1.335, 4.1.342, 4.1.357, 4.1.389, 4.1.396, 4.1.412, 4.1.418, 4.1.501, 4.5.518, 4.5.549, 4.5.561, 4.6.603, 4.6.623
Timeline
Official Publish:
September 7th, 2006
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.