CVE-2006-6226 - Multiple format string vulnerabilities in NeoEngine 0.8.2 and earlier, and CVS 3422, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) Console::Render in neoengine/console.cpp and (2) TextArea::Render in neowtk/textarea.cpp

Back Back to CVE browser

HIGH

Multiple format string vulnerabilities in NeoEngine 0.8.2 and earlier, and CVS 3422, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) Console::Render in neoengine/console.cpp and (2) TextArea::Render in neowtk/textarea.cpp

Published Dec 2, 2006

7.5

HIGH

CVSS 2.0

EPSS 2.58%

Description

Multiple format string vulnerabilities in NeoEngine 0.8.2 and earlier, and CVS 3422, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) Console::Render in neoengine/console.cpp and (2) TextArea::Render in neowtk/textarea.cpp.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://aluigi.altervista.org/adv/neoenginex-adv.txt
x_refsource_MISCVendor Advisory
http://www.osvdb.org/27926
vdb-entryx_refsource_OSVDB
http://www.securiteam.com/securitynews/5MP0N2AIUC.html
x_refsource_MISC
http://www.securityfocus.com/bid/18696
vdb-entryx_refsource_BIDVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6209
Advisory

Link	Providers	Tags
http://aluigi.altervista.org/adv/neoenginex-adv.txt		x_refsource_MISCVendor Advisory
http://www.osvdb.org/27926		vdb-entryx_refsource_OSVDB
http://www.securiteam.com/securitynews/5MP0N2AIUC.html		x_refsource_MISC
http://www.securityfocus.com/bid/18696		vdb-entryx_refsource_BIDVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6209		Advisory