Lucene search
HistoryMar 22, 2006 - 2:02 a.m.
CVE-2006-1356
cve-2006-1356
information security
buffer overflow
libvc
rolo
arbitrary code execution
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
79.4%
Stack-based buffer overflow in the count_vcards function in LibVC 3, as used in Rolo, allows user-assisted attackers to execute arbitrary code via a vCard file (e.g. contacts.vcf) containing a long line.
Affected configurations
Node
andrew_hsulibvcMatch3
ORandrew_hsuroloMatch11
| CPE | Name | Operator | Version |
|---|---|---|---|
| andrew_hsu:libvc | andrew hsu libvc | eq | 3 |
| andrew_hsu:rolo | andrew hsu rolo | eq | 11 |
Related
debiancve
debiancve
CVE-2006-1356
2006-03-22 02:02:00
nvd
nvd
CVE-2006-1356
2006-03-22 02:02:00
prion
prion
Stack overflow
2006-03-22 02:02:00
cvelist
cvelist
CVE-2006-1356
2006-03-22 02:00:00
ubuntucve
ubuntucve
CVE-2006-1356
2006-03-22 00:00:00
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
79.4%
Related for CVE-2006-1356