CVE-2006-0858

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-02-23 · updated 2026-06-16

Description

Unquoted Windows search path vulnerability in (1) snsmcon.exe, (2) the autostartup mechanism, and (3) an unspecified installation component in StarForce Safe'n'Sec Personal + Anti-Spyware 2.0 and earlier, and possibly other StarForce Safe'n'Sec products, might allow local users to gain privileges via a malicious "program" file in the C: folder.

Affected products

Starforce Safe N Sec Personal + Anti-Spyware: through 2.0

References

http://secdev.zoller.lu/research/safnsec.htm
http://www.securityfocus.com/archive/1/425504/100/0/threaded
http://www.securityfocus.com/bid/16762
http://secdev.zoller.lu/research/safnsec.htm
http://www.securityfocus.com/archive/1/425504/100/0/threaded
http://www.securityfocus.com/bid/16762

Get alerted when CVE-2006-0858 or the next vulnerability affects your stack