Vulnerability in Webroot Software Spy Sweeper
CVE-2006-6960
The Compression Sweep feature in WebRoot Spy Sweeper 4.5.9 and earlier does not handle non-ZIP archives, which allows remote attackers to bypass the malware detection via files with (1) RAR, (2) GZ, (3) TAR, (4) CAB, or (5) ACE compression.
EPSS: 0.012 (64.0th percentile) — read the EPSS interpretation.
Affected products
- Webroot_software Spy_sweeper
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry, Vendor Advisory)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)