CVE-2006-6490
Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner ...
Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HTML message.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HTML message.
- Record
CVE-2006-6490- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HTML message.
- Record
CVE-2006-6490- Updated
- 2026-11-02
EUVDEUVD-2006-6473 No score
Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HTML message.
- Record
EUVD-2006-6473- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qjhg-7vx8-5438 No score
Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner ...
Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HTML message.
- Record
GHSA-qjhg-7vx8-5438- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-6490 is a high vulnerability (CVSS 10.0) in Supportsoft Scriptrunner, published February 22, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.4%, the 95th percentile. No source names a fixed version.
References
archives.neohapsis.com/archives/bugtraq/2007-02/0454.html
kb.cert.org/vuls/id/441785
vupen.com/english/advisories/2007/0704
securityfocus.com/archive/1/461147/100/0/threaded
securitytracker.com/id?1017688
Show 13 moreShow less
osvdb.org/33482
secunia.com/advisories/24251
symantec.com/avcenter/security/Content/2007.02.22.html
exchange.xforce.ibmcloud.com/vulnerabilities/32636
labs.idefense.com/intelligence/vulnerabilities/display.php?id=478
nvd.nist.gov/vuln/detail/CVE-2006-6490
github.com/advisories/GHSA-qjhg-7vx8-5438