CVE-2006-6410 - Buffer overflow in an ActiveX control in VMWare 5.5.1 allows local users to execute arbitrary code v

CVE-2006-6410

Summary

Buffer overflow in an ActiveX control in VMWare 5.5.1 allows local users to execute arbitrary code via a long VmdbDb parameter to the Initialize function.

References

http://securityreason.com/securityalert/2008
http://www.open-security.org/advisories/17
http://www.securityfocus.com/archive/1/452746/100/100/threaded
http://www.securityfocus.com/archive/1/452775/100/100/threaded
http://www.securityfocus.com/bid/19732
https://www.exploit-db.com/exploits/2264

Vulnerable Configurations

cpe:2.3:a:vmware:workstation:5.5.1:*:*:*:*:*:*:*
cpe:2.3:a:vmware:workstation:5.5.1:*:*:*:*:*:*:*

CVSS

Base:	4.6 (as of 17-10-2018 - 21:48)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	19732
bugtraq	20061126 VMware 5.5.1 Local Buffer Overflow (HTML Exploit) 20061127 Re: VMware 5.5.1 Local Buffer Overflow (HTML Exploit)
exploit-db	2264
misc	http://www.open-security.org/advisories/17
sreason	2008

Last major update

17-10-2018 - 21:48

Published

10-12-2006 - 02:28

Last modified

17-10-2018 - 21:48