PT-2006-2518 · Microsoft · Ildasm+2

Published 2006-03-30 · Updated 2017-07-20 · CVE-2006-1510

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP SP2 Microsoft .NET 1.0 and 1.1 SDK

Description: A buffer overflow issue exists in the Microsoft Windows XP SP2 ntdll.dll system library, specifically in the calloc.c file, when utilized by the ILDASM disassembler in the Microsoft .NET 1.0 and 1.1 SDK. This could potentially allow user-assisted attackers to execute arbitrary code via a crafted .dll file containing a large static method.

Recommendations: For Microsoft Windows XP SP2, update the system to address the issue. For Microsoft .NET 1.0 and 1.1 SDK, avoid using the ILDASM disassembler with untrusted .dll files until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2006-1510

Affected Products

.Net Framework

Ildasm

Windows Xp

References · 10

• 🔥 http://securityfocus.com/bid/17243 · Exploit
• 🔥 http://secunia.com/advisories/19406 · Exploit
• 🔥 http://owasp.net/forums/234/showpost.aspx · Exploit
• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044482.html · Exploit
• 🔥 http://owasp.net/forums/257/showpost.aspx · Exploit
• 🔥 https://exploit-db.com/exploits/27476 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-1510 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1510 · Note
• http://vupen.com/english/advisories/2006/1113 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25439 · Note