PT-2006-4242 · Oracle · Autovue Solidmodel Professional Desktop Edition

Published 2006-07-28 · Updated 2018-10-18 · CVE-2006-3350

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AutoVue SolidModel Professional Desktop Edition version 19.1 Build 5993

Description The issue allows user-assisted remote attackers to execute arbitrary code via a long filename in an archive file, specifically in ARJ, RAR, or ZIP archives.

Recommendations For AutoVue SolidModel Professional Desktop Edition version 19.1 Build 5993, consider avoiding the use of long filenames in archives until a patch is available. As a temporary workaround, restrict the handling of archive files to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-3350

Affected Products

Autovue Solidmodel Professional Desktop Edition

References · 8

• http://secunia.com/secunia_research/2006-56/advisory · Vendor Advisory
• http://secunia.com/advisories/20852 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-3350 · Security Note
• http://securityfocus.com/archive/1/441173/100/0/threaded · Note
• http://vupen.com/english/advisories/2006/2979 · Note
• http://osvdb.org/27516 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27968 · Note
• http://securityfocus.com/bid/19170 · Note