CVE-2006-4692

Argument injection vulnerability in the Windows Object Packager packager.exe in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a "/" slash character in the filename of the Command Line...

CVE-2006-4692

Argument injection vulnerability in the Windows Object Packager packager.exe in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a "/" slash character in the filename of the Command Line...

CVE-2006-4692

Argument injection vulnerability in the Windows Object Packager packager.exe in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a "/" slash character in the filename of the Command Line...

CVE-2006-4692

CVE-2006-4692 describes an Argument injection in Windows Object Packager (packager.exe) that could allow remote code execution. The vulnerability exists in Windows XP (SP1/SP2) and Windows Server 2003 (SP1 and earlier) due to improper handling of the Command Line property when a slash (/) is incl...

MS06-065: Vulnerability in Windows Object Packager Could Allow Remote Execution (924496)

The remote host runs a version of Windows that has a flaw in its Object Packager. The flaw could allow an attacker to execute code on the remote host. To exploit this vulnerability, an attacker needs to entice a user to visit a malicious website. Tenable Network Security, Inc. include"compat.inc"...

Microsoft Windows Object Packager Remote Code Execution Vulnerability

Description The Microsoft Windows Object Packager is prone to a remote code-execution vulnerability. This issue is due to how the affected component handles file extensions. This vulnerability could let an attacker spoof dialogues, enticing a victim into installing a file that has been...

Microsoft Object Packager fails to properly display file types

Overview The Microsoft Object Packager fails to properly display the file types. This vulnerability may allow a remote, unauthenticated attacker execute arbitrary code on a vulnerable system. Description According to Microsoft: Object Packager is a tool you can use to create a package that you ca...

QNX packager privelege escalation

cp is called without full path specified...

QNX RTOS 6.2 - Application Packager Non-Explicit Path Execution

QNX RTOS 6.2 - Application Packager Non-Explicit Path Execution source: https://www.securityfocus.com/bid/6146/info A vulnerability has been discovered in an application packager shipped with QNX RTOS. It should be noted that the vulnerable packager is installed setuid root by default. It has bee...

QNX RTOS 6.2 - Application Packager Non-Explicit Path Execution

source: https://www.securityfocus.com/bid/6146/info A vulnerability has been discovered in an application packager shipped with QNX RTOS. It should be noted that the vulnerable packager is installed setuid root by default. It has been reported that the packager fails to use absolute paths to...