CVE-2006-0812

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-02-23 · updated 2026-06-16

Description

The VisNetic AntiVirus Plug-in (DKAVUpSch.exe) for Mail Server 4.6.0.4, 4.6.1.1, and possibly other versions before 4.6.1.2, does not drop privileges before executing other programs, which allows local users to gain privileges.

Affected products

Visnetic Antivirus Plug-In For Mail Server: 4.6.0.4, 4.6.1.1

References

http://secunia.com/advisories/16583
http://secunia.com/secunia_research/2005-65/advisory/
http://securitytracker.com/id?1015670
http://www.securityfocus.com/archive/1/425890/100/0/threaded
http://www.securityfocus.com/bid/16788
http://www.vupen.com/english/advisories/2006/0701
https://exchange.xforce.ibmcloud.com/vulnerabilities/24928
http://secunia.com/advisories/16583
http://secunia.com/secunia_research/2005-65/advisory/
http://securitytracker.com/id?1015670
http://www.securityfocus.com/archive/1/425890/100/0/threaded
http://www.securityfocus.com/bid/16788

Get alerted when CVE-2006-0812 or the next vulnerability affects your stack