medium5.1Public exploit code
CVE-2006-1356
Stack-based buffer overflow in the count_vcards function in LibVC 3, as used in Rolo, allows user-assisted attackers to execute arbitrary code via a vCard file…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- LibVC - '.VCard' 003 Processing Buffer Overflow2006-03-21 · dos · multiple · Verified
Impact
Stack-based buffer overflow in the count_vcards function in LibVC 3, as used in Rolo, allows user-assisted attackers to execute arbitrary code via a vCard file (e.g. contacts.vcf) containing a long line.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Andrew Hsu | Libvc | Version 3 |
| Andrew Hsu | Rolo | Version 11 |
References
- NVD record
- CVE.org record
- http://osvdb.org/ref/23/23985-libvc.txt
- http://secunia.com/advisories/19295
- http://www.osvdb.org/23985
- http://www.securityfocus.com/bid/17237
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25430
- http://osvdb.org/ref/23/23985-libvc.txt
- http://secunia.com/advisories/19295
- http://www.osvdb.org/23985
- http://www.securityfocus.com/bid/17237
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25430