CVE-2006-3490

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-07-10 · updated 2026-06-16

Description

F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier does not scan files contained on removable media when "Scan network drives" is disabled, which allows remote attackers to bypass anti-virus controls.

Affected products

F-Secure Anti-Virus: through 5.44; through 5.52; through 5.61; through 6.01; 5.5, 5.51, 5.52, 2003, 2004, 2005 (+1)
F-Secure Internet Security: 2003, 2004, 2005, 2006
F-Secure Service Platform For Service Providers: all versions

References

http://secunia.com/advisories/20858
http://securitytracker.com/id?1016400
http://securitytracker.com/id?1016401
http://www.f-secure.com/security/fsc-2006-4.shtml
http://www.osvdb.org/26876
http://www.securityfocus.com/bid/18693
http://www.vupen.com/english/advisories/2006/2573
https://exchange.xforce.ibmcloud.com/vulnerabilities/27502
http://secunia.com/advisories/20858
http://securitytracker.com/id?1016400
http://securitytracker.com/id?1016401
http://www.f-secure.com/security/fsc-2006-4.shtml

Get alerted when CVE-2006-3490 or the next vulnerability affects your stack