WebRoot Spy Sweeper up to 4.5.9 Malware Detection Remote Code Execution

Summaryinfo

A vulnerability labeled as critical has been found in WebRoot Spy Sweeper up to 4.5.9. Affected is an unknown function of the component Malware Detection. Executing a manipulation can lead to Remote Code Execution. This vulnerability is registered as CVE-2006-6961. No exploit is available.

Detailsinfo

A vulnerability classified as critical was found in WebRoot Spy Sweeper up to 4.5.9. This vulnerability affects an unknown part of the component Malware Detection. The manipulation with an unknown input leads to a remote code execution vulnerability. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

WebRoot Spy Sweeper 4.5.9 and earlier does not detect malware based on file contents, which allows remote attackers to bypass malware detection by changing a file s name.

The weakness was published 06/21/2006 (Website). The advisory is shared for download at securityfocus.com. This vulnerability was named CVE-2006-6961 since 01/29/2007. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. There are neither technical details nor an exploit publicly available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at X-Force (27272) and OSVDB (27538†). Similar entry is available at VDB-34659. Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• WebRoot

Name

• Spy Sweeper

Version

• 4.5.0
• 4.5.1
• 4.5.2
• 4.5.3
• 4.5.4
• 4.5.5
• 4.5.6
• 4.5.7
• 4.5.8
• 4.5.9

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion