CVE-2006-0858

HIGH 7.2CVE-2006-0858 · Published 23/02/2006 · updated 16/06/2026

In short

CVE-2006-0858 is a HIGH (CVSS 7.2) vulnerability affecting safe n sec personal + anti-spyware (starforce).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 27.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
safe n sec personal + anti-spyware starforce	`≤ 2.0`	No fix yet

Description

Unquoted Windows search path vulnerability in (1) snsmcon.exe, (2) the autostartup mechanism, and (3) an unspecified installation component in StarForce Safe'n'Sec Personal + Anti-Spyware 2.0 and earlier, and possibly other StarForce Safe'n'Sec products, might allow local users to gain privileges via a malicious "program" file in the C: folder.

References

secdev.zoller.lu/research/safnsec.htm
securityfocus.com/archive/1/425504/100/0/threaded
securityfocus.com/bid/16762

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free