« Volver al listado

CVE-2006-6619

Estado: ModificadaAlta (7.2)—

AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (6)

AVG — Antivirus Plus FirewallComodo — Comodo Personal FirewallFilseclab — Personal FirewallInfoprocess — AntihookSoft4ever — Look N StopSymantec — Sygate Personal Firewall

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-6619",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-12-18T11:28:00.000",
  "references": [
    {
      "url": "http://www.matousec.com/downloads/windows-personal-firewall-analysis/ex-coat.zip",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.matousec.com/info/advisories/Bypassing-process-identification-serveral-personal-firewalls-HIPS.php",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/454522/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/21615",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.matousec.com/downloads/windows-personal-firewall-analysis/ex-coat.zip",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.matousec.com/info/advisories/Bypassing-process-identification-serveral-personal-firewalls-HIPS.php",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/454522/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/21615",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB."
    },
    {
      "lang": "es",
      "value": "AVG Anti-Virus plus Firewall 7.5.431 depende del Process Environment Block (PEB) para la identificación de un proceso, el cual permite a usuarios locales evitar los controles del producto en el proceso mediante la simulación  de los campos (1) ImagePathName, (2) CommandLine y(3) WindowTitle en el PEB"
    }
  ],
  "lastModified": "2026-06-16T22:33:28.657",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:avg:antivirus_plus_firewall:7.5.431:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04B7232E-7DE6-4ED3-B2B5-9854AB0113B1"
            },
            {
              "criteria": "cpe:2.3:a:comodo:comodo_personal_firewall:2.3.6.81:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27A1D441-3366-4F5C-944B-76472ACCBC29"
            },
            {
              "criteria": "cpe:2.3:a:filseclab:personal_firewall:3.0.8686:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7CFD0C9-86A6-4C08-A9CB-5E25D42F80EB"
            },
            {
              "criteria": "cpe:2.3:a:infoprocess:antihook:3.0.23:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "991CC4DF-4B5F-46B8-A254-4E89E8787FD6"
            },
            {
              "criteria": "cpe:2.3:a:soft4ever:look_n_stop:2.05p2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "66E01B07-427D-495F-8286-C39CDB6CA5A5"
            },
            {
              "criteria": "cpe:2.3:a:symantec:sygate_personal_firewall:5.6.2808:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D3917B20-DA44-4CC4-82AE-ED1FB4398D38"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}