PT-2006-1675 · Qnx · Qnx Neutrino Rtos

Publicado 2006-02-09 · Atualizado 2017-07-20 · CVE-2006-0618

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions QNX Neutrino RTOS version 6.3.0

Description A format string issue in the fontsleuth component allows local users to execute arbitrary code by including format string specifiers in the program name, which is the zeroth argument.

Recommendations For QNX Neutrino RTOS version 6.3.0, update to a version that includes a fix for this issue, as using format string specifiers in the program name can lead to arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-0618

Produtos afetados

Qnx Neutrino Rtos

Referências · 8

• http://vupen.com/english/advisories/2006/0474 · Nota
• http://idefense.com/intelligence/vulnerabilities/display.php?id=380 · Aviso do Fabricante
• http://secunia.com/advisories/18750 · Aviso do Fabricante
• http://securityfocus.com/bid/16539 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24559 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0618 · Nota de Segurança
• http://osvdb.org/22966 · Nota
• http://securitytracker.com/id?1015599 · Nota