CVE-2006-1355

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-03-22 · updated 2026-06-16

Description

avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation folder, which allows local users to gain privileges or disable protection by modifying those files.

Affected products

Alwil Avast Antivirus: through 4.6.763

References

http://forum.avast.com/index.php?topic=19862.0
http://secunia.com/advisories/19284
http://www.dslreports.com/forum/remark%2C15601404~days=9999~start=20
http://www.securityfocus.com/bid/17158
http://www.vupen.com/english/advisories/2006/1011
https://exchange.xforce.ibmcloud.com/vulnerabilities/25336
http://forum.avast.com/index.php?topic=19862.0
http://secunia.com/advisories/19284
http://www.dslreports.com/forum/remark%2C15601404~days=9999~start=20
http://www.securityfocus.com/bid/17158
http://www.vupen.com/english/advisories/2006/1011
https://exchange.xforce.ibmcloud.com/vulnerabilities/25336

Get alerted when CVE-2006-1355 or the next vulnerability affects your stack