CVE-2006-3893

CRITICO 10.0CVE-2006-3893 · Published 04/12/2006 · updated 16/06/2026

In breve

CVE-2006-3893 è una vulnerabilità CRITICO (CVSS 10.0) che riguarda photo loader (casio), imagekit (newtone).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 6.6%, superiore al 93.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
photo loader casio	`= 3.00`	No fix yet
imagekit newtone	`= 5_fix_29= 6_fix_40`	No fix yet

Description

Multiple buffer overflows in the ActiveX controls in Newtone ImageKit 5 before Fix 30 and 6 before Fix 40, as used in CASIO Photo Loader software before 3.01 and possibly other software, allow remote attackers to execute arbitrary code via a crafted HTML document.

References

secunia.com/advisories/23286
kb.cert.org/vuls/id/210697 · Patch
securityfocus.com/bid/21375 · Patch
vupen.com/english/advisories/2006/4794
vupen.com/english/advisories/2006/4795
exchange.xforce.ibmcloud.com/vulnerabilities/30680

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free