PatchTheCVEwebroot software vulnerabilities
Recent CVEs affecting webroot software products. 8 tracked.
webroot software has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2007-01-29. Highest priority: CVE-2006-6961 (score 41/100).
- CVE-2006-6961 MEDIUM 6.8 UPGRADE WebRoot Spy Sweeper 4.5.9 and earlier does not detect malware based on file contents, which allows remote atta
- CVE-2006-6960 MEDIUM 6.8 UPGRADE The Compression Sweep feature in WebRoot Spy Sweeper 4.5.9 and earlier does not handle non-ZIP archives, which
- CVE-2006-6959 MEDIUM 4.6 DOWNGRADE WebRoot Spy Sweeper 4.5.9 and earlier allows local users to bypass the "Startup-Shield" security restrictions
- CVE-2005-3198 MEDIUM 4.6 UPGRADE Webroot Desktop Firewall before 1.3.0build52 allows local users to disable the firewall, even when password pr
- CVE-2005-3197 HIGH 7.2 DOWNGRADE Stack-based buffer overflow in PWIWrapper.dll for Webroot Desktop Firewall before 1.3.0build52 allows local us
- CVE-2005-0515 LOW 2.1 DOWNGRADE Smc.exe in My Firewall Plus 5.0 build 1117, and possibly other versions, does not drop privileges before launc
- CVE-2004-2676 HIGH 7.2 DOWNGRADE The Spy Sweeper Enterprise Client (SpySweeperTray.exe) in WebRoot Spy Sweeper before 2.0 does not drop privile
- CVE-2004-1313 HIGH 7.2 DOWNGRADE The Smc.exe process in My Firewall Plus 5.0 build 1117, and possibly other versions, does not drop privileges
FAQ
How do I fix webroot software vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is webroot software being exploited right now?
None of the tracked webroot software CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which webroot software CVE should I patch first?
CVE-2006-6961 currently ranks highest (41/100): WebRoot Spy Sweeper 4.5.9 and earlier does not detect malware based on file contents, which allows remote atta.