PT-2006-4242 · Oracle · Autovue Solidmodel Professional Desktop Edition

Publicado 2006-07-28 · Atualizado 2018-10-18 · CVE-2006-3350

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AutoVue SolidModel Professional Desktop Edition version 19.1 Build 5993

Description The issue allows user-assisted remote attackers to execute arbitrary code via a long filename in an archive file, specifically in ARJ, RAR, or ZIP archives.

Recommendations For AutoVue SolidModel Professional Desktop Edition version 19.1 Build 5993, consider avoiding the use of long filenames in archives until a patch is available. As a temporary workaround, restrict the handling of archive files to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-3350

Produtos afetados

Autovue Solidmodel Professional Desktop Edition

Referências · 8

• http://securityfocus.com/archive/1/441173/100/0/threaded · Nota
• http://vupen.com/english/advisories/2006/2979 · Nota
• http://secunia.com/secunia_research/2006-56/advisory · Aviso do Fabricante
• http://osvdb.org/27516 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27968 · Nota
• http://securityfocus.com/bid/19170 · Nota
• http://secunia.com/advisories/20852 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-3350 · Nota de Segurança