PT-2006-2884 · W3C · Amaya

Thomas Waldegger · Published 2006-04-20 · Updated 2018-10-18 · CVE-2006-1900

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Amaya versions 8.x before 8.8.5 Amaya version 9.4

Description The issue allows remote attackers to execute arbitrary code via buffer overflows. This can be achieved by providing a long value in certain attributes, such as the COMPACT attribute of the COLGROUP element, the ROWS attribute of the TEXTAREA element, and the COLOR attribute of the LEGEND element. Other unspecified attack vectors are also possible.

Recommendations For Amaya versions 8.x before 8.8.5, update to version 8.8.5 or later. For Amaya version 9.4, at the moment, there is no information about a newer version that contains a fix for this issue. As a temporary workaround, consider restricting the use of the COLGROUP, TEXTAREA, and LEGEND elements until a patch is available. Avoid using long values in the COMPACT, ROWS, and COLOR attributes of these elements to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-1900

Affected Products

Amaya

References · 13

• 🔥 https://exploit-db.com/exploits/27639 · Exploit
• 🔥 http://morph3us.org/advisories/20060412-amaya-94.txt · Exploit
• 🔥 https://exploit-db.com/exploits/27640 · Exploit
• 🔥 http://morph3us.org/advisories/20060412-amaya-94-2.txt · Exploit
• 🔥 http://securityfocus.com/bid/17507 · Exploit
• http://osvdb.org/24623 · Patch
• http://osvdb.org/24624 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-1900 · Security Note
• http://secunia.com/advisories/19670 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25791 · Note
• http://securityfocus.com/archive/1/430879/100/0/threaded · Note
• http://vupen.com/english/advisories/2006/1351 · Note
• http://securityfocus.com/archive/1/430877/100/0/threaded · Note