CVE

Id
16114  
CVE No.
CVE-2006-0010  
Status
Candidate  
Description
Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.  
Phase
Assigned (20051109)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
126608 16114 CVE-2006-0010 EEYE:EEYEB20050801  View
126609 16114 CVE-2006-0010 URL:http://www.eeye.com/html/Research/Advisories/EEYEB20050801.html  View
126610 16114 CVE-2006-0010 BUGTRAQ:20060110 [EEYEB-2000801] - Windows Embedded Open Type (EOT) Font Heap Overflow Vulnerability  View
126611 16114 CVE-2006-0010 URL:http://www.securityfocus.com/archive/1/archive/1/421885/100/0/threaded  View
126612 16114 CVE-2006-0010 FULLDISC:20060110 [EEYEB-2000801] - Windows Embedded Open Type (EOT) Font Heap Overflow Vulnerability  View
126613 16114 CVE-2006-0010 URL:http://seclists.org/fulldisclosure/2006/Jan/363  View
126614 16114 CVE-2006-0010 VULNWATCH:20060110 [EEYEB-2000801] - Windows Embedded Open Type (EOT) Font Heap Overflow Vulnerability  View
126615 16114 CVE-2006-0010 MISC:http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL&DocumentOID=375525  View
126616 16114 CVE-2006-0010 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm  View
126617 16114 CVE-2006-0010 MS:MS06-002  View
126618 16114 CVE-2006-0010 URL:http://www.microsoft.com/technet/security/bulletin/ms06-002.mspx  View
126619 16114 CVE-2006-0010 CERT:TA06-010A  View
126620 16114 CVE-2006-0010 URL:http://www.us-cert.gov/cas/techalerts/TA06-010A.html  View
126621 16114 CVE-2006-0010 CERT-VN:VU#915930  View
126622 16114 CVE-2006-0010 URL:http://www.kb.cert.org/vuls/id/915930  View
126623 16114 CVE-2006-0010 BID:16194  View
126624 16114 CVE-2006-0010 URL:http://www.securityfocus.com/bid/16194  View
126625 16114 CVE-2006-0010 VUPEN:ADV-2006-0118  View
126626 16114 CVE-2006-0010 URL:http://www.vupen.com/english/advisories/2006/0118  View
126627 16114 CVE-2006-0010 OSVDB:18829  View
126628 16114 CVE-2006-0010 URL:http://www.osvdb.org/18829  View
126629 16114 CVE-2006-0010 OVAL:oval:org.mitre.oval:def:1126  View
126630 16114 CVE-2006-0010 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1126  View
126631 16114 CVE-2006-0010 OVAL:oval:org.mitre.oval:def:1185  View
126632 16114 CVE-2006-0010 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1185  View
126633 16114 CVE-2006-0010 OVAL:oval:org.mitre.oval:def:1462  View
126634 16114 CVE-2006-0010 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1462  View
126635 16114 CVE-2006-0010 OVAL:oval:org.mitre.oval:def:1491  View
126636 16114 CVE-2006-0010 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1491  View
126637 16114 CVE-2006-0010 OVAL:oval:org.mitre.oval:def:698  View
126638 16114 CVE-2006-0010 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:698  View
126639 16114 CVE-2006-0010 OVAL:oval:org.mitre.oval:def:714  View
126640 16114 CVE-2006-0010 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:714  View
126641 16114 CVE-2006-0010 SECTRACK:1015459  View
126642 16114 CVE-2006-0010 URL:http://securitytracker.com/id?1015459  View
126643 16114 CVE-2006-0010 SECUNIA:18365  View
126644 16114 CVE-2006-0010 URL:http://secunia.com/advisories/18365  View
126645 16114 CVE-2006-0010 SECUNIA:18391  View
126646 16114 CVE-2006-0010 URL:http://secunia.com/advisories/18391  View
126647 16114 CVE-2006-0010 SECUNIA:18311  View
126648 16114 CVE-2006-0010 URL:http://secunia.com/advisories/18311  View
126649 16114 CVE-2006-0010 XF:win-embedded-fonts-bo(23922)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57971 JVNDB-2006-000167 Microsoft Windows エクスプローラの COM オブジェクトの処理における任意のコードを実行される脆弱性 Microsoft Windows エクスプローラには特定の COM オブジェクトの処理に不備が存在し、任意のコードが実行される脆弱性が存在します。 CVE-2006-0012 16114 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000167.html  View