CVE-2006-4359

The CVE-2006-4359 entry describes a stack-based buffer overflow in Trident Software PowerZip 7.06 Build 3895 affecting Windows 2000. The vulnerability arises from processing a ZIP archive containing a long filename, enabling remote code execution. Documents explicitly state the affected product/v...

CVE-2006-4326

Stack-based buffer overflow in Justsystem Ichitaro 9.x through 13.x, Ichitaro 2004, 2005, 2006, and Government 2006; Ichitaro for Linux; and FormLiner before 20060818 allows remote attackers to execute arbitrary code via long Unicode strings in a crafted document, as being actively exploited by...

CVE-2006-4221

Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter to the RunEgatherer method...

CVE-2006-4029

AGEphone 1.24 and 1.38.1 are affected by a stack-based buffer overflow in sipd.dll that can be triggered by a crafted UDP SIP packet. This vulnerability allows remote attackers to execute arbitrary code. Affected component: sipd.dll within AGEphone. Root cause: stack-based overflow in the SIP pac...

CVE-2006-3985

CVE-2006-3985 affects ConeXware PowerArchiver 9.62.03 via DZIPS32.DLL 6.0.0.4, where a stack-based buffer overflow occurs when a crafted ZIP archive containing a long-named file is processed. This allows a user‑assisted attacker to execute arbitrary code. The connected records confirm the vulnera...

CVE-2006-3943

Stack-based buffer overflow in NDFXArtEffects in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service crash via long 1 RGBExtraColor, 2 RGBForeColor, and 3 RGBBackColor properties...

CVE-2006-3925

Stack-based buffer overflow in ITIRecorder.MicRecorder ActiveX control in iarecord.dll in InterActual Player before 2.6 allows remote attackers to execute arbitrary code via a long argument to the Files method. NOTE: the provenance of this information is unknown; the details are obtained from thi...

CVE-2006-3350

Stack-based buffer overflow in AutoVue SolidModel Professional Desktop Edition 19.1 Build 5993 allows user-assisted remote attackers to execute arbitrary code via a long filename in a 1 ARJ, 2 RAR, or 3 ZIP archive...

[SA20852] AutoVue SolidModel Professional Buffer Overflow Vulnerability

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

[Full-disclosure] ZDI-06-024: eIQNetworks Enterprise Security Analyzer License Manager Buffer Overflow Vulnerability

ZDI-06-024: eIQnetworks Enterprise Security Analyzer License Manager Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-024.html July 25, 2006 -- CVE ID: CVE-2006-3838 -- Affected Vendor: eIQnetworks -- Affected Products: eIQnetworks Enterprise Security Analyzer Asta...

CVE-2006-3845

CVE-2006-3845 corresponds to a stack-based buffer overflow in WinRAR’s LHA handling (lzh.fmt) that affects WinRAR 3.00 through 3.60 beta 6. The issue occurs when processing LHA archives with a long filename, potentially allowing remote attackers to execute arbitrary code on the affected host. The...

CVE-2006-3845

Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary code via a long filename in a LHA archive...

CVE-2006-3687

Stack-based buffer overflow in the Universal Plug and Play UPnP service in D-Link DI-524, DI-604 Broadband Router, DI-624, D-Link DI-784, WBR-1310 Wireless G Router, WBR-2310 RangeBooster G Router, and EBR-2310 Ethernet Broadband Router allows remote attackers to execute arbitrary code via a long...

CVE-2006-3670

Stack-based buffer overflow in Winlpd 1.26 allows remote attackers to execute arbitrary code via a long string in a request to TCP port 515...

CVE-2006-3401

Stack-based buffer overflow in Quake 3 Engine as used by Quake 3: Arena 1.32b and 1.32c allows remote attackers to cause a denial of service and possibly execute code via long CSITEMS values...

CVE-2006-3400

Stack-based buffer overflow in the CGServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 SOF2MP GOLD 1.03 allows remote attackers to cause a denial of service and possibly execute code by sending a long command from the server...

CVE-2006-2200

Stack-based buffer overflow in libmms, as used by a MiMMS 0.0.9 and b xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via the 1 sendcommand, 2 stringutf16, 3 getdata, and 4 getmediapacket functions, and possibl...

CVE-2006-1469

Stack-based buffer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.6 allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TIFF image...

CVE-2006-1469

Stack-based buffer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.6 allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted TIFF image...

CVE-2006-2200

CVE-2006-2200 describes a stack-based buffer overflow in libmms, affecting MiMMS 0.0.9 and xine-lib 1.1.0 and earlier. The vulnerability can lead to a denial of service (application crash) and potentially arbitrary code execution via the affected functions (send_command, string_utf16, get_data, g...