CVE-2006-6676

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-12-21 · updated 2026-06-16
Weakness: CWE-189

Description

Integer overflow in the (a) OLE2 and (b) CHM parsers for ESET NOD32 Antivirus before 1.1743 allows remote attackers to execute arbitrary code via a crafted (1) .DOC or (2) .CAB file that triggers a heap-based buffer overflow.

Affected products

Eset Software Nod32 Antivirus: through 1.1742; 1.0.11, 1.0.12, 1.0.13

References

http://eset.com/support/updates.php?pageno=63
http://secunia.com/advisories/23459
http://securityreason.com/securityalert/2079
http://www.securityfocus.com/archive/1/454949/100/0/threaded
http://www.securityfocus.com/archive/1/455045/100/0/threaded
http://www.securityfocus.com/bid/21682
http://www.vupen.com/english/advisories/2006/5095
http://eset.com/support/updates.php?pageno=63
http://secunia.com/advisories/23459
http://securityreason.com/securityalert/2079
http://www.securityfocus.com/archive/1/454949/100/0/threaded
http://www.securityfocus.com/archive/1/455045/100/0/threaded

Get alerted when CVE-2006-6676 or the next vulnerability affects your stack