← back
CVE-2006-2297

CVE-2006-2297

EPSS 19.4%
Heap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) allows user-assisted attackers to execute arbitrary code via a crafted CHM / ITS file that triggers the overflow while decompiling.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/27850unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/20061http://securityreason.com/securityalert/886https://exchange.xforce.ibmcloud.com/vulnerabilities/26340http://www.osvdb.org/25501http://www.reversemode.com/advisories/advisory-itss.pdfhttp://www.securityfocus.com/archive/1/433435/100/0/threadedhttp://www.securityfocus.com/archive/1/433833/30/5040/threadedhttp://www.securityfocus.com/archive/1/433854/100/0/threadedhttp://www.securityfocus.com/bid/17926http://www.vupen.com/english/advisories/2006/1761