CVE-2006-1510 - Buffer overflow in calloc.c in the Microsoft Windows XP SP2 ntdll.dll system library, when used by the ILDASM disassembler in the Microsoft .NET 1.0 and 1.1 SDK, might allow user-assisted attackers to execute arbitrary code via a crafted .dll file with a large static method

Back Back to CVE browser

MEDIUM

Buffer overflow in calloc.c in the Microsoft Windows XP SP2 ntdll.dll system library, when used by the ILDASM disassembler in the Microsoft .NET 1.0 and 1.1 SDK, might allow user-assisted attackers to execute arbitrary code via a crafted .dll file with a large static method

Published Mar 30, 2006

4.0

MEDIUM

CVSS 2.0

EPSS 13.80%

Description

Buffer overflow in calloc.c in the Microsoft Windows XP SP2 ntdll.dll system library, when used by the ILDASM disassembler in the Microsoft .NET 1.0 and 1.1 SDK, might allow user-assisted attackers to execute arbitrary code via a crafted .dll file with a large static method.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (8)

http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044482.html
mailing-listx_refsource_FULLDISCExploitPatchVendor Advisory
http://owasp.net/forums/234/showpost.aspx
x_refsource_MISCExploitPatch
http://owasp.net/forums/257/showpost.aspx
x_refsource_MISCExploit
http://secunia.com/advisories/19406
third-party-advisoryx_refsource_SECUNIAExploitPatchVendor Advisory
http://www.securityfocus.com/bid/17243
vdb-entryx_refsource_BIDExploitPatch
http://www.vupen.com/english/advisories/2006/1113
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1514
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25439
vdb-entryx_refsource_XF

Link	Providers	Tags
http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044482.html		mailing-listx_refsource_FULLDISCExploitPatchVendor Advisory
http://owasp.net/forums/234/showpost.aspx		x_refsource_MISCExploitPatch
http://owasp.net/forums/257/showpost.aspx		x_refsource_MISCExploit
http://secunia.com/advisories/19406		third-party-advisoryx_refsource_SECUNIAExploitPatchVendor Advisory
http://www.securityfocus.com/bid/17243		vdb-entryx_refsource_BIDExploitPatch
http://www.vupen.com/english/advisories/2006/1113		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1514		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25439		vdb-entryx_refsource_XF