Heap overflow

🗓️ 10 Jan 2006 22:03:00Reported by PRIOn knowledge baseType

Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression

Reporter	Title	Published	Views	Family All 12
Check Point Advisories	EOT Files (CVE-2006-0010)	12 Feb 200600:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Windows Embedded Web Font Handling Buffer Overflow (CVE-2006-0010)	16 Apr 201200:00	–	checkpoint_advisories
Check Point Advisories	Security Best Practice: SmartDefense Content Protection Defenses	4 Dec 200600:00	–	checkpoint_advisories
CVE	CVE-2006-0010	10 Jan 200622:00	–	cve
Cvelist	CVE-2006-0010	10 Jan 200622:00	–	cvelist
NVD	CVE-2006-0010	10 Jan 200622:03	–	nvd
Prion	Design/Logic Flaw	31 Aug 200916:30	–	prion
securityvulns	Microsoft Security Bulletin MS06-002 Vulnerability in Embedded Web Fonts Could Allow Remote Code Execution (908519)	10 Jan 200600:00	–	securityvulns
securityvulns	[VulnWatch] [EEYEB-2000801] - Windows Embedded Open Type (EOT) Font Heap Overflow Vulnerability	11 Jan 200600:00	–	securityvulns
securityvulns	US-CERT Technical Cyber Security Alert TA06-010A -- Microsoft Windows, Outlook, and Exchange Vulnerabilities	11 Jan 200600:00	–	securityvulns

Source	Link
kb	www.kb.cert.org/vuls/id/915930
securityfocus	www.securityfocus.com/bid/16194
osvdb	www.osvdb.org/18829
secunia	www.secunia.com/advisories/18365
us-cert	www.us-cert.gov/cas/techalerts/TA06-010A.html
securitytracker	www.securitytracker.com/id
support	www.support.avaya.com/elmodocs2/security/ASA-2006-004.htm
secunia	www.secunia.com/advisories/18391
secunia	www.secunia.com/advisories/18311
www130	www.www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp

30 Apr 2019 14:27Current

8.2High risk

Vulners AI Score8.2

EPSS0.49817