PT-2006-2197 · Ebay · Ebay Enhanced Picture Services

Will Dormann · Published 2006-07-08 · Updated 2017-07-20 · CVE-2006-1176

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions eBay Enhanced Picture Services version 1.0.3.47 and earlier

Description A buffer overflow issue exists in the EUPWALcontrol.dll, which is part of the eBay Enhanced Picture Services. This issue can be exploited by remote attackers through a crafted HTML document, allowing them to execute arbitrary code.

Recommendations For versions 1.0.3.47 and earlier, update the EUPWALcontrol.dll to version 1.0.3.48 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-1176

Affected Products

Ebay Enhanced Picture Services

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2006-1176 · Security Note
• http://kb.cert.org/vuls/id/597721 · Note
• http://securitytracker.com/id?1016445 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27631 · Note
• http://vupen.com/english/advisories/2006/2698 · Note
• http://secunia.com/advisories/20969 · Note
• http://securityfocus.com/bid/18921 · Note
• http://kb.cert.org/vuls/id/MIMG-6QKPVH · Note