Unscored severity · published Jan 5, 2006
CVE-2006-0089
Buffer overflow in ESRI ArcPad 7.0.0.156 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a .amp file with a…
–
CVSS
3.3%
EPSS
No
On KEV
Description
Buffer overflow in ESRI ArcPad 7.0.0.156 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a .amp file with a COORDSYS tag with a long string attribute.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.3% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AR
Arcpad · Esri
through 7.0.0.156 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0089
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0089
Vendor Advisory
http://secunia.com/advisories/18294
Vendor Advisory
http://users.pandora.be/bratax/advisories/b007.html
www.osvdb.org
http://www.osvdb.org/22208
www.securityfocus.com
http://www.securityfocus.com/bid/16136
www.vupen.com
http://www.vupen.com/english/advisories/2006/0032