PT-2006-2884 · W3C · Amaya

Thomas Waldegger · Publicado 2006-04-20 · Atualizado 2018-10-18 · CVE-2006-1900

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Amaya versions 8.x before 8.8.5 Amaya version 9.4

Description The issue allows remote attackers to execute arbitrary code via buffer overflows. This can be achieved by providing a long value in certain attributes, such as the COMPACT attribute of the COLGROUP element, the ROWS attribute of the TEXTAREA element, and the COLOR attribute of the LEGEND element. Other unspecified attack vectors are also possible.

Recommendations For Amaya versions 8.x before 8.8.5, update to version 8.8.5 or later. For Amaya version 9.4, at the moment, there is no information about a newer version that contains a fix for this issue. As a temporary workaround, consider restricting the use of the COLGROUP, TEXTAREA, and LEGEND elements until a patch is available. Avoid using long values in the COMPACT, ROWS, and COLOR attributes of these elements to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-1900

Produtos afetados

Amaya

Referências · 13

• 🔥 https://exploit-db.com/exploits/27639 · Exploit
• 🔥 http://morph3us.org/advisories/20060412-amaya-94.txt · Exploit
• 🔥 https://exploit-db.com/exploits/27640 · Exploit
• 🔥 http://morph3us.org/advisories/20060412-amaya-94-2.txt · Exploit
• 🔥 http://securityfocus.com/bid/17507 · Exploit
• http://osvdb.org/24623 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25791 · Nota
• http://osvdb.org/24624 · Correção
• http://securityfocus.com/archive/1/430879/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1900 · Nota de Segurança
• http://vupen.com/english/advisories/2006/1351 · Nota
• http://secunia.com/advisories/19670 · Aviso do Fabricante
• http://securityfocus.com/archive/1/430877/100/0/threaded · Nota