CVE-2006-0618 - Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute a

CVE-2006-0618

Summary

Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifiers in the zeroth argument (program name).

References

http://secunia.com/advisories/18750
http://securitytracker.com/id?1015599
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=380
http://www.osvdb.org/22966
http://www.securityfocus.com/bid/16539
http://www.vupen.com/english/advisories/2006/0474
https://exchange.xforce.ibmcloud.com/vulnerabilities/24559

Vulnerable Configurations

cpe:2.3:a:qnx:neutrino_rtos:6.3.0:*:*:*:*:*:*:*
cpe:2.3:a:qnx:neutrino_rtos:6.3.0:*:*:*:*:*:*:*

CVSS

Base:	4.6 (as of 20-07-2017 - 01:29)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	16539
idefense	20060207 QNX Neutrino RTOS fontsleuth Command Format String Vulnerability
osvdb	22966
sectrack	1015599
secunia	18750
vupen	ADV-2006-0474
xf	qnx-fontsleuth-format-string(24559)

Last major update

20-07-2017 - 01:29

Published

09-02-2006 - 02:02

Last modified

20-07-2017 - 01:29