Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2006-2708
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2006-2708

Description:
Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 allows remote attackers to read portions of process memory via a modified size for (1) EM_GET_CE_PARAMETER and (2) EM_SET_CE_PARAMETER messages, which leads to a buffer overflow (probably an over-read).

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/26745
  http://xforce.iss.net/xforce/xfdb/26778

ST
  1016184

SAID
  Secunia Advisory: SA20378

CONFIRM
  http://www.kb.cert.org/vuls/id/WDON-6QAK6D

CERT-VN
  873409
  227929


Return to the previous page.