PT-2006-2518 · Microsoft · Ildasm+2

Publicado 2006-03-30 · Atualizado 2017-07-20 · CVE-2006-1510

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP SP2 Microsoft .NET 1.0 and 1.1 SDK

Description: A buffer overflow issue exists in the Microsoft Windows XP SP2 ntdll.dll system library, specifically in the calloc.c file, when utilized by the ILDASM disassembler in the Microsoft .NET 1.0 and 1.1 SDK. This could potentially allow user-assisted attackers to execute arbitrary code via a crafted .dll file containing a large static method.

Recommendations: For Microsoft Windows XP SP2, update the system to address the issue. For Microsoft .NET 1.0 and 1.1 SDK, avoid using the ILDASM disassembler with untrusted .dll files until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-1510

Produtos afetados

.Net Framework

Ildasm

Windows Xp

Referências · 10

• 🔥 http://securityfocus.com/bid/17243 · Exploit
• 🔥 http://secunia.com/advisories/19406 · Exploit
• 🔥 http://owasp.net/forums/234/showpost.aspx · Exploit
• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044482.html · Exploit
• 🔥 http://owasp.net/forums/257/showpost.aspx · Exploit
• 🔥 https://exploit-db.com/exploits/27476 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1510 · Nota
• http://vupen.com/english/advisories/2006/1113 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1510 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25439 · Nota