Unscored severity · published Apr 20, 2006
CVE-2006-1900
Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before 8.8.5, allow remote attackers to execute arbitrary code…
–
CVSS
16.9%
EPSS
No
On KEV
Description
Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before 8.8.5, allow remote attackers to execute arbitrary code via a long value in (1) the COMPACT attribute of the COLGROUP element, (2) the ROWS attribute of the TEXTAREA element, and (3) the COLOR attribute of the LEGEND element; and via other unspecified attack vectors consisting of "dozens of possible snippets."
Exploitation
Is it being used?
Exploit prediction (EPSS)16.9% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AM
Amaya · W3c
9.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1900
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1900
Exploit
http://morph3us.org/advisories/20060412-amaya-94-2.txt
Exploit
http://morph3us.org/advisories/20060412-amaya-94.txt
Patch
http://secunia.com/advisories/19670
Patch
http://www.osvdb.org/24623
Patch
http://www.osvdb.org/24624
www.securityfocus.com
http://www.securityfocus.com/archive/1/430877/100/0/threaded