QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2006-2708

Back to search

CVE-2006-2708

Published: May 31, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 allows remote attackers to read portions of process memory via a modified size for (1) EM_GET_CE_PARAMETER and (2) EM_SET_CE_PARAMETER messages, which leads to a buffer overflow (probably an over-read).

VendorProductVersions

n/a

n/a

affected
n/a

References

VU#227929
third-party-advisory
x_refsource_CERT-VN
VU#873409
third-party-advisory
x_refsource_CERT-VN
c5evm-emsetceparameter-bo(26745)
vdb-entry
x_refsource_XF
c5evm-emgetceparameter-bo(26778)
vdb-entry
x_refsource_XF
20378
third-party-advisory
x_refsource_SECUNIA
ADV-2006-2069
vdb-entry
x_refsource_VUPEN
1016184
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now