CVE-2006-4221

IBM eGatherer - Stack-Based Buffer Overflow via RunEgatherer Method

Title source: llm
STIX 2.1

Description

Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter to the RunEgatherer method.

References (10)

Core 10
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/444899/100/100/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1016705
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/28418
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/1424
Patch, Vendor Advisory x_refsource_misc
http://www.eeye.com/html/research/advisories/AD20060816.html
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3305
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21528
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/380277
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/443471/100/0/threaded
Exploit, Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/19554

Scores

EPSS 0.0869
EPSS Percentile 94.6%

Details

Status published
Products (2)
ibm/egatherer 2.0.16
ibm/egatherer 2.42.243
Published Aug 18, 2006
Tracked Since Feb 18, 2026