← Vulnerability feed

Vulnerability record · CVE-2006-6496 · published 13 December 2006

CVE-2006-6496: Broadcom etrust antivirus vulnerability

Broadcom · Etrust Antivirus

The (1) VetMONNT.sys and (2) VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL buffers, which allows local users with administrative access to cause a denial of service (system crash) via certain IOCTLs.

6.6 CVSS 2.0 Medium EPSS 0.38% · top 70.6%
6.6CVSS 2.0 base score
0.38%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
22References
16 Jun 2026Last modified by NVD

Description

The (1) VetMONNT.sys and (2) VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2007 v3.0 do not properly handle NULL buffers, which allows local users with administrative access to cause a denial of service (system crash) via certain IOCTLs.

AV:L/AC:M/Au:S/C:C/I:C/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://crm.my-etrust.com/CIDocument.asp?KDId=2651&GUID=9FD7E4F8362C4A168D88B4FFA34DCB4C
http://secunia.com/advisories/23378
http://securitytracker.com/id?1017381
http://securitytracker.com/id?1017382
http://www.osvdb.org/30845
http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=41
http://www.securityfocus.com/archive/1/454420/100/0/threaded
http://www.securityfocus.com/bid/21593
http://www.vupen.com/english/advisories/2006/5010
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34870
https://exchange.xforce.ibmcloud.com/vulnerabilities/30909
http://crm.my-etrust.com/CIDocument.asp?KDId=2651&GUID=9FD7E4F8362C4A168D88B4FFA34DCB4C
http://secunia.com/advisories/23378
http://securitytracker.com/id?1017381
http://securitytracker.com/id?1017382
http://www.osvdb.org/30845
http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=41
http://www.securityfocus.com/archive/1/454420/100/0/threaded
http://www.securityfocus.com/bid/21593
http://www.vupen.com/english/advisories/2006/5010
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34870
https://exchange.xforce.ibmcloud.com/vulnerabilities/30909

Track CVE-2006-6496 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2005-1693Broadcom etrust antivirus vulnerabilityInteger overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Antivirus for…EPSS 6.9%9.3CVE-2009-3587Broadcom anti-virus vulnerabilityUnspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 throug…EPSS 7.6%9.3CVE-2007-2864CA Anti-Virus engine stack buffer overflow via crafted CAB fileThe Anti-Virus engine in multiple CA (Computer Associates) products before content update 30.6 has a stack-based buffer overflow triggered by a large…EPSS 50%analysed7.5CVE-2006-3223Broadcom etrust antivirus vulnerabilityFormat string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to caus…EPSS 6.7%7.5CVE-2004-0937Archive zip vulnerabilitySophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protecti…EPSS 15%7.5CVE-2004-0932McAfee Anti-Virus Engine DATS driver bypass via malformed compressed fileThe McAfee Anti-Virus Engine DATS drivers before 4398 (Oct 13 2004) and DATS Driver before 4397 (Oct 6 2004) fail to properly handle compressed files…EPSS 63%analysed7.5CVE-2004-0933Archive zip vulnerabilityComputer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content M…EPSS 21%7.5CVE-2004-0934Archive zip vulnerabilityKaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, whi…EPSS 15%

Source: NIST National Vulnerability Database (record CVE-2006-6496), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.