CVE-2006-6960: The Compression Sweep feature in WebRoot Spy Sweeper 4.5.9 and earlier does not handle non-ZIP archives, wh...

Security readout for executives and security teams

This is an old antivirus bypass issue in WebRoot Spy Sweeper. Its Compression Sweep feature reportedly checked ZIP archives but not several other archive formats, so malware hidden inside RAR, GZ, TAR, CAB, or ACE files could avoid that product's detection path. Exposure is likely limited to environments still running WebRoot Spy Sweeper 4.5.9 or earlier and relying on Compression Sweep to inspect compressed files. The source bundle does not identify affected CPEs or modern product names. Treat this as a legacy-control gap, not an emergency based on available evidence. Prioritize it if old Spy Sweeper installations protect endpoints, email attachments, or file-ingestion workflows. Mitigation focus: Inventory endpoints for WebRoot Spy Sweeper 4.5.9 or earlier.; Check WebRoot or vendor guidance for fixed versions or retirement advice.; Do not rely on Compression Sweep alone for non-ZIP archive inspection..

Prepared

Jun 29, 2026, 07:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.