Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2006-2273
HistoryMay 12, 2006 - 12:02 a.m.

CVE-2006-2273

2006-05-1200:02:00
[email protected]
web.nvd.nist.gov
1

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

High

EPSS

0.043

Percentile

92.3%

JSON

The InstallProduct routine in the Verisign VUpdater.Install (aka i-Nav) ActiveX control does not verify Microsoft Cabinet (.CAB) files, which allows remote attackers to run an arbitrary executable file.

Affected configurations

Nvd
Node
verisigni-nav
VendorProductVersionCPE
verisigni-nav*cpe:2.3:a:verisign:i-nav:*:*:*:*:*:*:*:*

Related

nessus 1
cve 1
securityvulns 1
zdi 1
prion 1
cvelist 1
nessus
nessus
I-Nav VUpdater.Install ActiveX Buffer Overflow
2006-05-11 00:00:00
cve
cve
CVE-2006-2273
2006-05-12 00:02:00
securityvulns
securityvulns
ZDI-06-014: Verisign I-Nav ActiveX Control Code Execution Vulnerability
2006-05-11 00:00:00
zdi
zdi
Verisign I-Nav ActiveX Control Code Execution Vulnerability
2006-05-10 00:00:00
prion
prion
Design/Logic Flaw
2006-05-12 00:02:00
cvelist
cvelist
CVE-2006-2273
2006-05-12 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

High

EPSS

0.043

Percentile

92.3%

JSON
Related for NVD:CVE-2006-2273
nessus1cve1securityvulns1zdi1prion1cvelist1