CVE-2006-4221

Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter to the RunEgatherer method.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

8.69% chance of exploitation in the next 30 days, 95th percentile

Published

2006-08-18

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.securityfocus.com/archive/1/444899/100/100/threaded

References

• CVE Record
• NVD entry

Related

• CVE-2006-4220
• CVE-2006-4227
• CVE-2006-4219
• CVE-2006-4230
• CVE-2006-4217
• CVE-2006-4234