CVE-2006-6490: Supportsoft Scriptrunner

High severity, CVSS 10.0. EPSS: 10.4% chance of exploitation in the next 30 days.

Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HTML message.

Affected products

• Supportsoft Scriptrunner: any version
• Supportsoft Smartissue: any version
• Symantec Automated Support Assistant: any version
• Symantec Norton Antivirus: version 2006 only
• Symantec Norton Internet Security: version 2006 only
• Symantec Norton System Works: version 2006 only

Published 2007-02-22. Last modified 2026-06-16.