CVE

Id
22780  
CVE No.
CVE-2006-6676  
Status
Candidate  
Description
Integer overflow in the (a) OLE2 and (b) CHM parsers for ESET NOD32 Antivirus before 1.1743 allows remote attackers to execute arbitrary code via a crafted (1) .DOC or (2) .CAB file that triggers a heap-based buffer overflow.  
Phase
Assigned (20061220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
220297 22780 CVE-2006-6676 BUGTRAQ:20061220 NOD32 Antivirus DOC parsing Arbitrary Code Execution Advisory  View
220298 22780 CVE-2006-6676 URL:http://www.securityfocus.com/archive/1/archive/1/454949/100/0/threaded  View
220299 22780 CVE-2006-6676 BUGTRAQ:20061221 NOD32 Antivirus CAB parsing Arbitrary Code Execution Advisory  View
220300 22780 CVE-2006-6676 URL:http://www.securityfocus.com/archive/1/archive/1/455045/100/0/threaded  View
220301 22780 CVE-2006-6676 CONFIRM:http://eset.com/support/updates.php?pageno=63  View
220302 22780 CVE-2006-6676 BID:21682  View
220303 22780 CVE-2006-6676 URL:http://www.securityfocus.com/bid/21682  View
220304 22780 CVE-2006-6676 VUPEN:ADV-2006-5095  View
220305 22780 CVE-2006-6676 URL:http://www.vupen.com/english/advisories/2006/5095  View
220306 22780 CVE-2006-6676 SECUNIA:23459  View
220307 22780 CVE-2006-6676 URL:http://secunia.com/advisories/23459  View
220308 22780 CVE-2006-6676 SREASON:2079  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60354 JVNDB-2006-002620 Netrik の edit_textarea 関数における任意のコマンドを実行される脆弱性 Netrik の form-file.c の edit_textarea 関数は、textarea フィールドを編集している際、テンポラリファイル名を適切に検証しないため、任意のコマンドを実行される脆弱性が存在します。 CVE-2006-6678 22780 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002620.html  View