Automated Support Assistant

DATE	CVE	VULNERABILITY TITLE	RISK
2007-02-22	CVE-2006-6490	Remote Buffer Overflow vulnerability in SupportSoft ActiveX Controls Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HTML message. network low complexity supportsoft symantec critical	10.0
2006-10-19	CVE-2006-5404	Buffer Overflow vulnerability in Symantec Automated Support Assistant ActiveX Control Unspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to obtain sensitive information via unspecified vectors. network high complexity symantec	2.6
2006-10-19	CVE-2006-5403	Buffer Overflow vulnerability in Symantec Automated Support Assistant ActiveX Control Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors. network high complexity symantec	5.1