CVE-2006-1176 — Buffer overflow in eBay Enhanced Picture Services (aka EPUImageControl Class) in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item (SYI), Setup & Test eBay Enhanced Picture Services, Picture Manager Enhanced Uploader, and CARad.com Add Vehicle, allows remote attackers to execute arbitrary code via a crafted HTML document

Back Back to CVE browser

HIGH

Buffer overflow in eBay Enhanced Picture Services (aka EPUImageControl Class) in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item (SYI), Setup & Test eBay Enhanced Picture Services, Picture Manager Enhanced Uploader, and CARad.com Add Vehicle, allows remote attackers to execute arbitrary code via a crafted HTML document

Published Jul 8, 2006

7.5

HIGH

CVSS 2.0

EPSS 4.58%

Description

Buffer overflow in eBay Enhanced Picture Services (aka EPUImageControl Class) in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item (SYI), Setup & Test eBay Enhanced Picture Services, Picture Manager Enhanced Uploader, and CARad.com Add Vehicle, allows remote attackers to execute arbitrary code via a crafted HTML document.

Affected products

Remediation

No remediation recorded yet.

Metrics

4.58% 0.04583

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.04583

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	4.58% (0.04583)	91.35th	v5 (v2026.06.15)
Jun 15, 2026	4.54% (0.04536)	90.31th	v5 (v2026.06.15)
Jan 2, 2026	6.49% (0.06487)	90.84th	v4 (v2025.03.14)
Mar 17, 2025	5.15% (0.05150)	89.13th	v4 (v2025.03.14)
Dec 12, 2024	13.03% (0.13031)	95.74th	v3 (v2023.03.01)
Apr 3, 2023	13.03% (0.13031)	94.60th	v3 (v2023.03.01)
Mar 7, 2023	12.43% (0.12431)	94.49th	v3 (v2023.03.01)
Mar 6, 2023	7.78% (0.07777)	93.24th	v2 (v2022.01.01)
Apr 1, 2022	7.78% (0.07777)	92.60th	v2 (v2022.01.01)
Feb 4, 2022	7.78% (0.07777)	81.54th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

References (7)

http://secunia.com/advisories/20969
third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1016445
vdb-entryx_refsource_SECTRACK
http://www.kb.cert.org/vuls/id/597721
third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.kb.cert.org/vuls/id/MIMG-6QKPVH
x_refsource_CONFIRM
http://www.securityfocus.com/bid/18921
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/2698
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/27631
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/20969		third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1016445		vdb-entryx_refsource_SECTRACK
http://www.kb.cert.org/vuls/id/597721		third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.kb.cert.org/vuls/id/MIMG-6QKPVH		x_refsource_CONFIRM
http://www.securityfocus.com/bid/18921		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/2698		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/27631		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner certcc

Published Jul 8, 2006

Updated Aug 7, 2024

Reserved Mar 12, 2006

Link CVE-2006-1176

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-1176

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-1176