← Vulnerability feed

Vulnerability record · CVE-2006-1355 · published 22 March 2006

CVE-2006-1355: Alwil avast antivirus vulnerability

Alwil · Avast Antivirus

avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation folder, which allows local users to gain privileges or disable protection by modifying those files.

7.2 CVSS 2.0 High EPSS 0.39% · top 69.9%
7.2CVSS 2.0 base score
0.39%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation folder, which allows local users to gain privileges or disable protection by modifying those files.

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://forum.avast.com/index.php?topic=19862.0
http://secunia.com/advisories/19284 Vendor Advisory
http://www.dslreports.com/forum/remark%2C15601404~days=9999~start=20
http://www.securityfocus.com/bid/17158
http://www.vupen.com/english/advisories/2006/1011
https://exchange.xforce.ibmcloud.com/vulnerabilities/25336
http://forum.avast.com/index.php?topic=19862.0
http://secunia.com/advisories/19284 Vendor Advisory
http://www.dslreports.com/forum/remark%2C15601404~days=9999~start=20
http://www.securityfocus.com/bid/17158
http://www.vupen.com/english/advisories/2006/1011
https://exchange.xforce.ibmcloud.com/vulnerabilities/25336

Track CVE-2006-1355 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2006-2869Alwil avast antivirus vulnerabilityUnspecified vulnerability in the CHM unpacker in avast! before 4.7.844 has unknown impact and remote attack vectors.EPSS 1.7%7.5CVE-2006-4626Alwil avast antivirus vulnerabilityHeap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869 allows remote attackers to execute arbitrary code via a crafted LHA file …EPSS 4.7%7.5CVE-2005-2385Alwil avast antivirus vulnerabilityBuffer overflow in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition …EPSS 4.0%7.5CVE-2005-1719Alwil avast antivirus vulnerabilityUnknown vulnerability in ALWIL avast! antivirus 4 (4.6.6230) and earlier, when running on Windows NT 4.0, does not properly detect certain viruses.EPSS 1.4%7.2CVE-2005-1770Alwil avast antivirus memory buffer overflow vulnerabilityBuffer overflow in the Aavmker4 device driver in Avast! Antivirus 4.6 and possibly other versions allows local users to cause a denial of service (sy…EPSS 0.68%5.1CVE-2005-3214Alwil avast antivirus vulnerabilityMultiple interpretation error in unspecified versions of Avast Antivirus allows remote attackers to bypass virus detection via a malicious executable…EPSS 1.7%5.0CVE-2005-2384Alwil avast antivirus vulnerabilityDirectory traversal vulnerability in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Edition 4.6.665 a…EPSS 3.5%4.9CVE-2006-1892Alwil avast antivirus vulnerabilityavast! 4 Linux Home Edition 1.0.5 allows local users to modify permissions of arbitrary files via a symlink attack on the /tmp/_avast4_ temporary dir…EPSS 0.49%

Source: NIST National Vulnerability Database (record CVE-2006-1355), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.