CVE-2006-2154

EMC Retrospect for Windows <6.5.382-7.5.1.105 - Code Injection

Title source: llm

Description

EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 does not drop privileges before opening files, which allows local users to execute arbitrary code via the File>Open dialog.

References (5)

Core 5

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/26226

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/1612

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19850

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/17798

Various Sources x_refsource_confirm

http://kb.dantz.com/display/2n/articleDirect/index.asp?aid=9507&r=0.7344324

Scores

EPSS 0.0004

EPSS Percentile 12.3%

Details

Status published

Products (1)

emc/retrospect < 6.5

Published May 03, 2006

Tracked Since Feb 18, 2026