PT-2006-2197 · Ebay · Ebay Enhanced Picture Services

Will Dormann · Publicado 2006-07-08 · Atualizado 2017-07-20 · CVE-2006-1176

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions eBay Enhanced Picture Services version 1.0.3.47 and earlier

Description A buffer overflow issue exists in the EUPWALcontrol.dll, which is part of the eBay Enhanced Picture Services. This issue can be exploited by remote attackers through a crafted HTML document, allowing them to execute arbitrary code.

Recommendations For versions 1.0.3.47 and earlier, update the EUPWALcontrol.dll to version 1.0.3.48 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-1176

Produtos afetados

Ebay Enhanced Picture Services

Referências · 8

• http://kb.cert.org/vuls/id/597721 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1176 · Nota de Segurança
• http://securitytracker.com/id?1016445 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27631 · Nota
• http://vupen.com/english/advisories/2006/2698 · Nota
• http://secunia.com/advisories/20969 · Nota
• http://securityfocus.com/bid/18921 · Nota
• http://kb.cert.org/vuls/id/MIMG-6QKPVH · Nota