CVE-2006-6488
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2006-6488
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control (DlgWrapper.dll) before 8.4.166.0, as used by ICONICS OPC Enabled Gauge, Switch, and Vessel ActiveX, allows remote attackers to execute arbitrary code via a long (1) FileName or (2) Filter argument.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
ICONICS Dialog Wrapper模块ActiveX控件DoModal()方式远程栈溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ICONICS是一家专业提供基于OPC可视化软件的公司，ICONICS Dialog Wrapper模块ActiveX控件是捆绑于启用了OPC的可视化工具中的控件。 ICONICS Gauge ActiveX、ICONICS Switch ActiveX和ICONICS Vessel ActiveX中所使用的Dialog Wrapper模块ActiveX控件(DlgWrapper.dll)在处理DoModal()方式时存在栈溢出漏洞。如果远程攻击者能够通过FileName或Filter参数传送超长字符串的
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2006-6488
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2006-6488
请登录查看更多情报信息。
Same Patch Batch · n/a · 2007-01-03 · 30 CVEs total
| CVE-2006-6838 | Rediff Bol Downloader控件文件下载和任意命令执行漏洞 | |
| CVE-2007-0017 | VLC Media Player畸形"udp://"URI格式串处理漏洞 | |
| CVE-2007-0016 | MoviePlay LST文件处理缓冲区溢出漏洞 | |
| CVE-2006-6850 | Shadowed Portal 'Include.PHP'远程文件包含漏洞 | |
| CVE-2006-6849 | Cahier de texte 'index.php' 未授权安全漏洞 | |
| CVE-2006-6848 | ASPTicker 'Admin.ASP' SQL注入漏洞 | |
| CVE-2006-6847 | RealPlayer 'IERPPLUG.DLL' ActiveX控件远程拒绝服务漏洞 | |
| CVE-2006-6846 | While You Were Out (WYWO) InOut Board 多个SQL注入漏洞 | |
| CVE-2006-6845 | CMS Made Simple 'index.php' Search搜索操作跨站脚本攻击漏洞 | |
| CVE-2006-6844 | CMS Made Simple 评论模块跨站脚本攻击漏洞 | |
| CVE-2006-6843 | Joomla! BE IT EasyPartner 组件远程文件包含漏洞 | |
| CVE-2006-6842 | Acronym Mod 'Admin_Acronyms.PHP' SQL注入漏洞 | |
| CVE-2006-6841 | PHPBB 表单会话检查漏洞 | |
| CVE-2006-6840 | PHPBB 未明安全漏洞 | |
| CVE-2006-6839 | PHPBB 未明重定向漏洞 | |
| CVE-2006-4575 | The Address Book 多个SQL注入漏洞 | |
| CVE-2006-6837 | Total Commands ISO_WinCmd插件多个远程栈溢出漏洞 | |
| CVE-2007-0048 | Adobe Acrobat Reader Plugin拒绝服务漏洞 | |
| CVE-2007-0047 | Adobe Acrobat Reader Plugin 多个CRLF跨站脚本伪造攻击漏洞 | |
| CVE-2007-0046 | Adobe Acrobat Reader Plugin 双重释放漏洞 |
Showing top 20 of 30 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2006-6488
No comments yet