PT-2006-5348 · Miniclip · Retro64 / Miniclip Cr64Loader Activex Control

Will Dormann · Published 2006-09-06 · Updated 2017-07-20 · CVE-2006-4555

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Retro64 / Miniclip CR64Loader ActiveX control (affected versions not specified)

Description A buffer overflow issue exists in the Retro64 / Miniclip CR64Loader ActiveX control, allowing remote attackers to execute arbitrary code. This can be achieved via unspecified vectors involving an HTML document that references the CLSID of the control.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-4555

Affected Products

Retro64 / Miniclip Cr64Loader Activex Control

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2006-4555 · Security Note
• http://securitytracker.com/id?1016781 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28735 · Note
• http://kb.cert.org/vuls/id/649289 · Note
• http://vupen.com/english/advisories/2006/3434 · Note
• http://securityfocus.com/bid/19810 · Note
• http://secunia.com/advisories/21743 · Note