Unscored severity · published Aug 22, 2006
CVE-2006-4289
Buffer overflow in Sony VAIO Media Server 2.x, 3.x, 4.x, and 5.x before 20060626 allows remote attackers to execute arbitrary code via unspecified vectors
–
CVSS
6.1%
EPSS
No
On KEV
Description
Buffer overflow in Sony VAIO Media Server 2.x, 3.x, 4.x, and 5.x before 20060626 allows remote attackers to execute arbitrary code via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.1% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VM
Vaio Media Server · Sony
2.0; 3.0; 4.0; 5.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4289
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4289
Patch
http://kb.sony-europe.com/kb/solutions/en/V00000_V00499/v00246.html
Patch
http://secunia.com/advisories/21512
Patch
http://www.css.ap.sony.com/VAIO/Website/General/ImportantNotices.aspx?Section=SN&file=/vaio/importantnotice/security_notice/SecurityNotice_VMIS.htm
Patch
http://www.pentest.co.uk/documents/ptl-2006-02.html
Patch
http://www.securityfocus.com/bid/19561
www.vupen.com
http://www.vupen.com/english/advisories/2006/3287
More from Vaio Media Server
–
CVE-2006-4290
Directory traversal vulnerability in Sony VAIO Media Server 2.x, 3.x, 4.x, and 5.x before 20060626 allows remote attackers to gain sensitive information via unspecified vectors