Symantec Automated Support Assistant vulnerabilities

3 CVEs affecting Symantec Automated Support Assistant, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-6490, published 2007-02-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-6490, published 2007-02-22. High severity, CVSS 10.0. EPSS: 10.4% chance of exploitation in the next 30 days. Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus,…
CVE-2006-5403, published 2006-10-19. Medium severity, CVSS 5.1. EPSS: 6.3% chance of exploitation in the next 30 days. Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted…
CVE-2006-5404, published 2006-10-19. Low severity, CVSS 2.6. EPSS: 2.6% chance of exploitation in the next 30 days. Unspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted…