CVE-2006-5403: Symantec Automated Support Assistant

Medium severity, CVSS 5.1. EPSS: 6.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

Affected products

• Symantec Automated Support Assistant: any version
• Symantec Norton Antivirus: any version
• Symantec Norton Internet Security: version 2006 only
• Symantec Norton System Works: version 2005 only; version 2006 only

Published 2006-10-19. Last modified 2026-06-16.