Lucene search

K
cve[email protected]CVE-2006-3893
HistoryDec 04, 2006 - 11:28 a.m.

CVE-2006-3893

2006-12-0411:28:00
web.nvd.nist.gov
32
cve-2006-3893
buffer overflow
activex
newtone imagekit
casio photo loader
arbitrary code execution
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.074 Low

EPSS

Percentile

94.1%

Multiple buffer overflows in the ActiveX controls in Newtone ImageKit 5 before Fix 30 and 6 before Fix 40, as used in CASIO Photo Loader software before 3.01 and possibly other software, allow remote attackers to execute arbitrary code via a crafted HTML document.

Affected configurations

NVD
Node
casiophoto_loaderMatch3.00
OR
newtoneimagekitMatch5_fix_29
OR
newtoneimagekitMatch6_fix_40

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.074 Low

EPSS

Percentile

94.1%

Related for CVE-2006-3893