CVE-2006-4438: Doctor Web Ltd Dr.web

Medium severity, CVSS 6.4. EPSS: 10.5% chance of exploitation in the next 30 days.

Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LHA archive with an extended header that contains a long directory name.

Affected products

• Doctor Web Ltd Dr.web: up to and including 4.33_for_linux

Published 2006-09-20. Last modified 2026-06-16.