medium4.0Public exploit code
CVE-2006-1510
Buffer overflow in calloc.c in the Microsoft Windows XP SP2 ntdll.dll system library, when used by the ILDASM disassembler in the Microsoft .NET 1.0 and 1.1 SD…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft .NET Framework SDK 1.0/1.1 - MSIL Tools Buffer Overflow2006-03-27 · dos · windows · Verified
Impact
Buffer overflow in calloc.c in the Microsoft Windows XP SP2 ntdll.dll system library, when used by the ILDASM disassembler in the Microsoft .NET 1.0 and 1.1 SDK, might allow user-assisted attackers to execute arbitrary code via a crafted .dll file with a large static method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | .Net Framework | Versions 1.0, 1.1 |
References
- NVD record
- CVE.org record
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044482.html
- http://owasp.net/forums/234/showpost.aspx
- http://owasp.net/forums/257/showpost.aspx
- http://secunia.com/advisories/19406
- http://www.securityfocus.com/bid/17243
- http://www.vupen.com/english/advisories/2006/1113
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25439
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044482.html
- http://owasp.net/forums/234/showpost.aspx
- http://owasp.net/forums/257/showpost.aspx
- http://secunia.com/advisories/19406
- http://www.securityfocus.com/bid/17243
- http://www.vupen.com/english/advisories/2006/1113
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25439