{"id":"CVE-2006-4438","aliases":["EUVD-2006-4426","GHSA-g69f-vjgm-8vjj"],"status":"published","title":"Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier...","description":"Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LHA archive with an extended header that contains a long directory name.","severity":{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.10697,"percentile":0.95846,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2006-09-20T23:00:00Z","modified":"2026-06-16T22:29:06Z","exploits":[{"source":"exploitdb","id":"EDB-2404","title":"Dr.Web AntiVirus 4.33 - LHA long Directory name Local Overflow","type":"local","platform":"linux","date":"2006-09-20","verified":true,"url":"https://www.exploit-db.com/exploits/2404"}],"products":[{"vendor":"doctor_web_ltd","product":"dr.web"}],"references":[{"url":"http://www.securityfocus.com/bid/20119","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/22019","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/3719","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049552.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4438"},{"url":"https://github.com/advisories/GHSA-g69f-vjgm-8vjj"}],"sources":{"cve":[{"id":"CVE-2006-4438","description":"Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LHA archive with an extended header that contains a long directory name.","status":"published","published":"2006-09-20T23:00:00Z","modified":"2024-08-07T19:06:07.646Z","updated_at":"2026-11-02T14:33:51.085765Z"}],"euvd":[{"id":"EUVD-2006-4426","description":"Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LHA archive with an extended header that contains a long directory name.","status":"published","published":"2006-09-20T23:00:00Z","modified":"2024-08-07T19:06:07Z","updated_at":"2026-11-03T01:15:52.149607Z"}],"ghsa":[{"id":"GHSA-g69f-vjgm-8vjj","title":"Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier...","description":"Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LHA archive with an extended header that contains a long directory name.","status":"published","published":"2022-05-01T07:18:45Z","modified":"2023-01-31T05:01:56Z","updated_at":"2026-11-02T14:48:09.652829Z"}],"nvd":[{"id":"CVE-2006-4438","description":"Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LHA archive with an extended header that contains a long directory name.","status":"published","published":"2006-09-20T23:07:00Z","modified":"2026-06-16T22:29:06.08Z","cvss":[{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:06.675668Z"}]}}