CVE:CVE-2006-6490
CNNVD:CNNVD-200702-443
SupportSoft是一种实现自助服务功能的软件，用户可以用它解决自己遇到的一些问题。
SupportSoft的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户客户端机器。
SupportSoft的SmartIssue、RemoteAssist和Probe ActiveX控件在处理畸形调用时存在溢出漏洞，远程攻击者可以通过诱使用户打开包含恶意代码的网页来利用此漏洞在用户机器上执行任意指令。Symantec的Norton Internet Security 2006套件包含了SupportSoft工具，因此也受此漏洞的影响。
solution:Upgrade supportsoft scriptrunner to a higher version than *; Upgrade supportsoft smartissue to a higher version than *; Upgrade symantec automated_support_assistant to a higher version than *; Upgrade symantec norton_antivirus to a higher version than 2006,and avoid the version 2006; Upgrade symantec norton_internet_security to a higher version than 2006,and avoid the version 2006; Upgrade symantec norton_system_works to a higher version than 2006,and avoid the version 2006