Unscored severity · published Dec 31, 2006
CVE-2006-6488
Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control (DlgWrapper.dll) before 8.4.166.0, as used by ICONICS OPC Enabled Gauge, Switch,…
–
CVSS
7.9%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control (DlgWrapper.dll) before 8.4.166.0, as used by ICONICS OPC Enabled Gauge, Switch, and Vessel ActiveX, allows remote attackers to execute arbitrary code via a long (1) FileName or (2) Filter argument.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.9% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DW
Dialog Wrapper Module Activex Control · Iconics
through 8.4.165.0 · source: NVD
Affected product
DW
Dialog Wrapper Module Activex Control
Iconics
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6488
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6488
osvdb.org
http://osvdb.org/32552
Vendor Advisory
http://secunia.com/advisories/23583
Third Party Advisory
http://www.kb.cert.org/vuls/id/251969
www.securityfocus.com
http://www.securityfocus.com/bid/21849
www.vupen.com
http://www.vupen.com/english/advisories/2007/0025
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/31228