« Volver al listado

CVE-2006-6622

Estado: ModificadaAlta (7.2)—

Soft4Ever Look 'n' Stop (LnS) 2.05p2 before 20061215 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (6)

AVG — Antivirus Plus FirewallComodo — Comodo Personal FirewallFilseclab — Personal FirewallInfoprocess — AntihookSoft4ever — Look N StopSymantec — Sygate Personal Firewall

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-6622",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-12-18T11:28:00.000",
  "references": [
    {
      "url": "http://www.matousec.com/downloads/windows-personal-firewall-analysis/ex-coat.zip",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.matousec.com/info/advisories/Bypassing-process-identification-serveral-personal-firewalls-HIPS.php",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/454522/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/21615",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.wilderssecurity.com/showthread.php?t=158155",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.matousec.com/downloads/windows-personal-firewall-analysis/ex-coat.zip",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.matousec.com/info/advisories/Bypassing-process-identification-serveral-personal-firewalls-HIPS.php",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/454522/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/21615",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.wilderssecurity.com/showthread.php?t=158155",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Soft4Ever Look 'n' Stop (LnS) 2.05p2 before 20061215 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB."
    },
    {
      "lang": "es",
      "value": "Soft4Ever Look 'n' Stop (LnS) 2.05p2 en versiones anteriores a 20061215 depende del Process Environment Block (PEB) para la identificación de un proceso, el cual permite a usuarios locales evitar los controles del producto en el proceso mediante la simulación  de los campos (1) ImagePathName, (2) CommandLine y(3) WindowTitle en el PEB."
    }
  ],
  "lastModified": "2026-06-16T22:33:28.990",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:avg:antivirus_plus_firewall:7.5.431:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04B7232E-7DE6-4ED3-B2B5-9854AB0113B1"
            },
            {
              "criteria": "cpe:2.3:a:comodo:comodo_personal_firewall:2.3.6.81:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27A1D441-3366-4F5C-944B-76472ACCBC29"
            },
            {
              "criteria": "cpe:2.3:a:filseclab:personal_firewall:3.0.8686:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7CFD0C9-86A6-4C08-A9CB-5E25D42F80EB"
            },
            {
              "criteria": "cpe:2.3:a:infoprocess:antihook:3.0.23:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "991CC4DF-4B5F-46B8-A254-4E89E8787FD6"
            },
            {
              "criteria": "cpe:2.3:a:soft4ever:look_n_stop:2.05p2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "66E01B07-427D-495F-8286-C39CDB6CA5A5"
            },
            {
              "criteria": "cpe:2.3:a:symantec:sygate_personal_firewall:5.6.2808:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D3917B20-DA44-4CC4-82AE-ED1FB4398D38"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}