CVE-2006-1355
avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files...
avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation folder, which allows local users to gain privileges or disable protection by modifying those files.
Exploit likelihood
What each source reports
NVD Score used
avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation folder, which allows local users to gain privileges or disable protection by modifying those files.
- Record
CVE-2006-1355- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation folder, which allows local users to gain privileges or disable protection by modifying those files.
- Record
CVE-2006-1355- Updated
- 2026-11-02
EUVDEUVD-2006-1359 No score
avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation folder, which allows local users to gain privileges or disable protection by modifying those files.
- Record
EUVD-2006-1359- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xqq5-jv4j-qg87 No score
avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files...
avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation folder, which allows local users to gain privileges or disable protection by modifying those files.
- Record
GHSA-xqq5-jv4j-qg87- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1355 is a high vulnerability (CVSS 7.2) in Alwil Avast Antivirus, published March 22, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. No source names a fixed version.
References
dslreports.com/forum/remark%2C15601404~days=9999~start=20
secunia.com/advisories/19284
forum.avast.com/index.php?topic=19862.0
vupen.com/english/advisories/2006/1011
exchange.xforce.ibmcloud.com/vulnerabilities/25336
securityfocus.com/bid/17158
nvd.nist.gov/vuln/detail/CVE-2006-1355
github.com/advisories/GHSA-xqq5-jv4j-qg87