PT-2006-1648 · Gallery · Gallery

CVE-2006-0587 · Publicado 2006-02-08 · Atualizado 2024-02-14

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Gallery versions prior to 1.5.2-pl2

Description The issue allows remote authenticated users to trick an owner into modifying stored album data and possibly executing arbitrary code via unspecified vectors involving a crafted link to a crafted file.

Recommendations For versions prior to 1.5.2-pl2, update to version 1.5.2-pl2 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-0587

Produtos afetados

Gallery

Referências · 13

• http://securitytracker.com/id?1015641 · Correção
• http://secunia.com/advisories/18735 · Aviso do Fabricante
• http://osvdb.org/22944 · Correção
• http://securityfocus.com/bid/16533 · Correção
• http://digitalarmaments.com/2006140293402395.html · Nota
• http://osvdb.org/23256 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2006-02/0286.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24768 · Nota
• http://gallery.menalto.com/gallery_1_5_2_pl2_security_release · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0587 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0587 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24538 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2006-02/0224.html · Nota