CVE-2006-7234

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 0.9%

from disclosure to weapon7 days

Published on NVDOct 27

1st PoC+7d

exploitation probability

0.9%top 44% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2) mime.types files in the current working directory.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/32530

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=396949 http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html https://bugzilla.redhat.com/show_bug.cgi?id=214205 http://secunia.com/advisories/32407 http://secunia.com/advisories/32416 http://secunia.com/advisories/33568 https://exchange.xforce.ibmcloud.com/vulnerabilities/46132 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9719 http://www.mandriva.com/security/advisories?name=MDVSA-2008:217 http://www.openwall.com/lists/oss-security/2008/10/25/3 http://www.redhat.com/support/errata/RHSA-2008-0965.html http://www.securityfocus.com/bid/31917