CVE-2006-2482
Published Sep 8, 2006
Last updated 7 years ago
Overview
- Description
- Heap-based buffer overflow in the TZipTV component in (1) ZipTV for Delphi 7 2006.1.26 and for C++ Builder 2006-1.16, (2) PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221, and possibly other products, allows user-assisted attackers to execute arbitrary code via an ARJ archive with a long header. NOTE: the ACE archive vector is covered by CVE-2005-2856.
- Source
- PSIRT-CNA@flexerasoftware.com
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.8
- Impact score
- 6.4
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-119
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microchip_data_systems:ziptv_for_c\\+\\+_builder:2006.1.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C9BA19C4-046F-4C11-B113-236D82333338"
},
{
"criteria": "cpe:2.3:a:microchip_data_systems:ziptv_for_delphi_7:2006.1.26:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "962152E9-7CE0-43E7-8295-E851636F3EFE"
},
{
"criteria": "cpe:2.3:a:pentaware:pentasuite-pro:8.5.1.221:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46374F90-EAB3-42E8-B285-7ECC127FB06A"
},
{
"criteria": "cpe:2.3:a:pentaware:pentazip:8.5.1.190:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9C26D49-BDA7-4E5A-8380-117C34D093D9"
}
],
"operator": "OR"
}
]
}
]