Lucene search
HistoryJan 29, 2007 - 4:28 p.m.
CVE-2006-6960
webroot
spy sweeper
cve-2006-6960
compression sweep
rar
gz
tar
cab
ace
security vulnerability
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.013 Low
EPSS
Percentile
85.7%
The Compression Sweep feature in WebRoot Spy Sweeper 4.5.9 and earlier does not handle non-ZIP archives, which allows remote attackers to bypass the malware detection via files with (1) RAR, (2) GZ, (3) TAR, (4) CAB, or (5) ACE compression.
Affected configurations
Node
webroot_softwarespy_sweeperRange≤4.5.9
| CPE | Name | Operator | Version |
|---|---|---|---|
| webroot_software:spy_sweeper | webroot software spy sweeper | le | 4.5.9 |
Related
cvelist
cvelist
CVE-2006-6960
2007-01-29 16:00:00
nvd
nvd
CVE-2006-6960
2007-01-29 16:28:00
securityvulns
securityvulns
WebRoot SpySweeper protection bypass
2007-02-04 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.013 Low
EPSS
Percentile
85.7%
Related for CVE-2006-6960