← back
CVE-2006-2297

CVE-2006-2297

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 19%
from disclosure to weapon0 days
Published on NVDMay 10
1st PoCMay 9
exploitation probability
19%top 3% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Heap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) allows user-assisted attackers to execute arbitrary code via a crafted CHM / ITS file that triggers the overflow while decompiling.
Affected products
n/a · n/a
public PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/27850
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://secunia.com/advisories/20061http://securityreason.com/securityalert/886https://exchange.xforce.ibmcloud.com/vulnerabilities/26340http://www.osvdb.org/25501http://www.reversemode.com/advisories/advisory-itss.pdfhttp://www.securityfocus.com/archive/1/433435/100/0/threadedhttp://www.securityfocus.com/archive/1/433833/30/5040/threadedhttp://www.securityfocus.com/archive/1/433854/100/0/threadedhttp://www.securityfocus.com/bid/17926http://www.vupen.com/english/advisories/2006/1761