NVD

Id
63324  
Name
CVE-2006-4692  
Description
Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a "/" (slash) character in the filename of the Command Line property, followed by a valid file extension, which causes the command before the slash to be executed, aka "Object Packager Dialogue Spoofing Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-10-10  
Modified Date
2011-03-07  
Seq
2006-4692  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
329977 63324 CVE-2006-4692 oval:org.mitre.oval:def:496  View
329978 63324 CVE-2006-4692 1017037  View
329979 63324 CVE-2006-4692 VU#703936  View
329980 63324 CVE-2006-4692 MS06-065  View
329981 63324 CVE-2006-4692 20061011 Secunia Research: Microsoft Windows Object Packager Dialog Spoofing  View
329982 63324 CVE-2006-4692 20061014 Re: Secunia Research: Microsoft Windows Object Packager Dialog Spoofing  View
329983 63324 CVE-2006-4692 SSRT061264  View
329984 63324 CVE-2006-4692 20318  View
329985 63324 CVE-2006-4692 ADV-2006-3984  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58496 JVNDB-2006-000692 Microsoft Windows のオブジェクトパッケージャにおけるダイアログのなりすましの脆弱性 Microsoft Windows に実装されているオブジェクトパッケージャ (packager.exe) には、ファイルを不適切に処理してしまうため、オブジェクトパッケージを実行する前の確認ダイアログに表示されるファイルの種類を偽装可能な脆弱性が存在します。 CVE-2006-4692 20794 CVE-2006-4692 63324 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000692.html 2006-10-10 2007-04-01 View