PT-2006-6529 · Adobe · Download Manager

Publicado 2006-12-06 · Atualizado 2018-10-17 · CVE-2006-5856

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe Download Manager versions prior to 2.2

Description The issue is related to a stack-based buffer overflow that can be triggered by a long section name in the dm.ini file. This file is populated via an AOM file, allowing remote attackers to potentially execute arbitrary code.

Recommendations For versions prior to 2.2, update to version 2.2 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-5856

Produtos afetados

Download Manager

Referências · 14

• http://adobe.com/support/security/bulletins/apsb06-19.html · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30742 · Nota
• http://zerodayinitiative.com/advisories/ZDI-06-044 · Nota
• http://securitytracker.com/id?1017340 · Nota
• http://kb.cert.org/vuls/id/448569 · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051114.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5856 · Nota
• http://vupen.com/english/advisories/2006/4867 · Nota
• http://secunia.com/advisories/23233 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5856 · Nota de Segurança
• http://securityfocus.com/bid/21453 · Aviso do Fabricante
• http://research.eeye.com/html/advisories/published/AD20061205.html · Aviso do Fabricante
• http://securityfocus.com/archive/1/453755/100/0/threaded · Nota
• http://securityfocus.com/archive/1/453636/100/0/threaded · Nota