CA eTrust Antivirus WebScan ActiveX Control Vulnerabilities

High Nessus Plugin ID 22160


The remote Windows host has an ActiveX control that is affected by multiple vulnerabilities.


The Windows remote host contains the WebScan ActiveX control, which is used by Computer Associates' eTrust Antivirus WebScan service.

The version of this ActiveX control on the remote host reportedly contains a buffer overflow and fails to properly validate parameters.
Exploitation of these issues may allow an unauthenticated, remote attacker to execute arbitrary code or gain privileged access.


Either remote the control or upgrade to WebScan v1.1.0.1048 or later by visiting and allowing Internet Explorer to update a new version of

See Also

Plugin Details

Severity: High

ID: 22160

File Name: etrust_webscan_activex_overflow.nasl

Version: $Revision: 1.19 $

Type: local

Agent: windows

Family: Windows

Published: 2006/08/04

Modified: 2017/06/05

Dependencies: 13855

Risk Information

Risk Factor: High


Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:ND

Vulnerability Information

Required KB Items: SMB/Registry/Enumerated

Exploit Available: false

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 2006/08/03

Reference Information

CVE: CVE-2006-3976, CVE-2006-3977

BID: 19399, 19403

OSVDB: 27785, 27786