What’s Vulnerable › Vulnerabilities

CVE-2006-4438

• Severity: medium (CVSS 6.4 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 10.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2006-09-20 · updated 2026-06-16

Description

Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LHA archive with an extended header that contains a long directory name.

Affected products

• Doctor Web Ltd Dr.Web: through 4.33_for_linux

References

• http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049552.html
• http://secunia.com/advisories/22019
• http://www.securityfocus.com/bid/20119
• http://www.vupen.com/english/advisories/2006/3719
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049552.html
• http://secunia.com/advisories/22019
• http://www.securityfocus.com/bid/20119
• http://www.vupen.com/english/advisories/2006/3719

Get alerted when CVE-2006-4438 or the next vulnerability affects your stack