CVE-2006-1900 - Vulnerability Details - OpenCVE

Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before 8.8.5, allow remote attackers to execute arbitrary code via a long value in (1) the COMPACT attribute of the COLGROUP element, (2) the ROWS attribute of the TEXTAREA element, and (3) the COLOR attribute of the LEGEND element; and via other unspecified attack vectors consisting of "dozens of possible snippets."

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity High

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
W3c	Amaya

Configuration 1 [-]

cpe:2.3:a:w3c:amaya:9.4:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://morph3us.org/advisories/20060412-amaya-94-2.txt
http://morph3us.org/advisories/20060412-amaya-94.txt
http://secunia.com/advisories/19670
http://www.osvdb.org/24623
http://www.osvdb.org/24624
http://www.securityfocus.com/archive/1/430877/100/0/threaded
http://www.securityfocus.com/archive/1/430879/100/0/threaded
http://www.securityfocus.com/bid/17507
http://www.vupen.com/english/advisories/2006/1351
https://exchange.xforce.ibmcloud.com/vulnerabilities/25791

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-04-20T10:00:00

Updated: 2024-08-07T17:27:29.459Z

Reserved: 2006-04-20T00:00:00

Link: CVE-2006-1900

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2006-04-20T10:02:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2006-1900

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-04-12T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before 8.8.5, allow remote attackers to execute arbitrary code via a long value in (1) the COMPACT attribute of the COLGROUP element, (2) the ROWS attribute of the TEXTAREA element, and (3) the COLOR attribute of the LEGEND element; and via other unspecified attack vectors consisting of \"dozens of possible snippets.\""}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-18T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "ADV-2006-1351", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/1351"}, {"name": "20060412 [BuHa-Security] Stack Based Buffer Overflow Vulnerability in Amaya 9.4", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/430877/100/0/threaded"}, {"tags": ["x_refsource_MISC"], "url": "http://morph3us.org/advisories/20060412-amaya-94.txt"}, {"name": "19670", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/19670"}, {"name": "17507", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/17507"}, {"name": "24624", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/24624"}, {"name": "amaya-various-attribute-bo(25791)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25791"}, {"name": "20060412 [BuHa-Security] Stack Based Buffer Overflow Vulnerability in Amaya 9.4 #2", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/430879/100/0/threaded"}, {"name": "24623", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/24623"}, {"tags": ["x_refsource_MISC"], "url": "http://morph3us.org/advisories/20060412-amaya-94-2.txt"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-1900", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before 8.8.5, allow remote attackers to execute arbitrary code via a long value in (1) the COMPACT attribute of the COLGROUP element, (2) the ROWS attribute of the TEXTAREA element, and (3) the COLOR attribute of the LEGEND element; and via other unspecified attack vectors consisting of \"dozens of possible snippets.\""}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "ADV-2006-1351", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/1351"}, {"name": "20060412 [BuHa-Security] Stack Based Buffer Overflow Vulnerability in Amaya 9.4", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/430877/100/0/threaded"}, {"name": "http://morph3us.org/advisories/20060412-amaya-94.txt", "refsource": "MISC", "url": "http://morph3us.org/advisories/20060412-amaya-94.txt"}, {"name": "19670", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/19670"}, {"name": "17507", "refsource": "BID", "url": "http://www.securityfocus.com/bid/17507"}, {"name": "24624", "refsource": "OSVDB", "url": "http://www.osvdb.org/24624"}, {"name": "amaya-various-attribute-bo(25791)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25791"}, {"name": "20060412 [BuHa-Security] Stack Based Buffer Overflow Vulnerability in Amaya 9.4 #2", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/430879/100/0/threaded"}, {"name": "24623", "refsource": "OSVDB", "url": "http://www.osvdb.org/24623"}, {"name": "http://morph3us.org/advisories/20060412-amaya-94-2.txt", "refsource": "MISC", "url": "http://morph3us.org/advisories/20060412-amaya-94-2.txt"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T17:27:29.459Z"}, "title": "CVE Program Container", "references": [{"name": "ADV-2006-1351", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/1351"}, {"name": "20060412 [BuHa-Security] Stack Based Buffer Overflow Vulnerability in Amaya 9.4", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/430877/100/0/threaded"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://morph3us.org/advisories/20060412-amaya-94.txt"}, {"name": "19670", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/19670"}, {"name": "17507", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/17507"}, {"name": "24624", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/24624"}, {"name": "amaya-various-attribute-bo(25791)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25791"}, {"name": "20060412 [BuHa-Security] Stack Based Buffer Overflow Vulnerability in Amaya 9.4 #2", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/430879/100/0/threaded"}, {"name": "24623", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/24623"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://morph3us.org/advisories/20060412-amaya-94-2.txt"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-1900", "datePublished": "2006-04-20T10:00:00", "dateReserved": "2006-04-20T00:00:00", "dateUpdated": "2024-08-07T17:27:29.459Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:w3c:amaya:9.4:*:*:*:*:*:*:*", "matchCriteriaId": "EB6C2F61-1CD9-4FD8-81B1-1F096D4AA249", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before 8.8.5, allow remote attackers to execute arbitrary code via a long value in (1) the COMPACT attribute of the COLGROUP element, (2) the ROWS attribute of the TEXTAREA element, and (3) the COLOR attribute of the LEGEND element; and via other unspecified attack vectors consisting of \"dozens of possible snippets.\""}], "id": "CVE-2006-1900", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.6, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 4.9, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2006-04-20T10:02:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Vendor Advisory"], "url": "http://morph3us.org/advisories/20060412-amaya-94-2.txt"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Vendor Advisory"], "url": "http://morph3us.org/advisories/20060412-amaya-94.txt"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/19670"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.osvdb.org/24623"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.osvdb.org/24624"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/430877/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/430879/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/17507"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/1351"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25791"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Vendor Advisory"], "url": "http://morph3us.org/advisories/20060412-amaya-94-2.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Vendor Advisory"], "url": "http://morph3us.org/advisories/20060412-amaya-94.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/19670"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.osvdb.org/24623"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.osvdb.org/24624"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/430877/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/430879/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/17507"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/1351"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25791"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}