CVE-2006-3901

Publicada em 27 jul 2006 · Atualizada em 07 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 3.6%

Multiple stack-based buffer overflows in Tumbleweed Email Firewall (EMF) allow remote attackers to execute arbitrary code via an email attachment with an LHA archive that contains a (1) file or (2) directory with a long LHA extended header, (3) an LHA archive in which the "temporary pathname" field for decompressed output is greater than 2 bytes, or (4) an LHA archive with a long filename.

Produtos afetados

n/a · n/a

Referências

http://marc.info/?l=full-disclosure&m=115378437918939&w=2 http://secunia.com/advisories/21194 http://www.hustlelabs.com/advisories/04072006_tweed.pdf http://www.osvdb.org/27495 http://www.securityfocus.com/archive/1/441497/100/0/threaded http://www.securityfocus.com/bid/19146 http://www.vupen.com/english/advisories/2006/2970