CVE-2006-1172

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Cryptomathic - ActiveX Control Remote Buffer Overflow2006-05-05 · remote · windows · Verified

Impact

Stack-based buffer overflow in the createPKCS10 function in Cryptomathic Cenroll ActiveX Control 1.1.0.0 allows remote attackers to execute arbitrary code via vectors related to the TDC Digital signature.

Affected products

References

• NVD record
• CVE.org record
• http://cirt.dk/advisories/cirt-43-advisory.pdf
• http://secunia.com/advisories/19968
• http://securitytracker.com/id?1016034
• http://www.kb.cert.org/vuls/id/548689
• http://www.osvdb.org/25282
• http://www.securityfocus.com/archive/1/433079/100/0/threaded
• http://www.securityfocus.com/bid/17852
• http://www.vupen.com/english/advisories/2006/1675
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26255
• http://cirt.dk/advisories/cirt-43-advisory.pdf
• http://secunia.com/advisories/19968
• http://securitytracker.com/id?1016034
• http://www.kb.cert.org/vuls/id/548689
• http://www.osvdb.org/25282
• http://www.securityfocus.com/archive/1/433079/100/0/threaded
• http://www.securityfocus.com/bid/17852
• http://www.vupen.com/english/advisories/2006/1675
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26255