CVE-2006-6623: Avg Antivirus Plus Firewall

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Sygate Personal Firewall 5.6.2808 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB.

Affected products

• Avg Antivirus Plus Firewall: version 7.5.431 only
• Comodo Comodo Personal Firewall: version 2.3.6.81 only
• Filseclab Personal Firewall: version 3.0.8686 only
• Infoprocess Antihook: version 3.0.23 only
• SOFT4EVER Look N Stop: version 2.05p2 only
• Symantec Sygate Personal Firewall: version 5.6.2808 only

Published 2006-12-18. Last modified 2026-06-16.