CVE-2006-6618: Avg Antivirus Plus Firewall

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

AntiHook 3.0.0.23 - Desktop relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB.

Affected products

  • Avg Antivirus Plus Firewall: version 7.5.431 only
  • Comodo Comodo Personal Firewall: version 2.3.6.81 only
  • Filseclab Personal Firewall: version 3.0.8686 only
  • Infoprocess Antihook: version 3.0.23 only
  • SOFT4EVER Look N Stop: version 2.05p2 only
  • Symantec Sygate Personal Firewall: version 5.6.2808 only

Published 2006-12-18. Last modified 2026-06-16.