CVEvulnerability
CVE-2006-6488
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control (DlgWrapper.dll) before 8.4.166.0, as used by ICONICS OPC Enabled Gauge, Switch, and Vessel ActiveX, allows remote attackers to execute arbitrary code via a long (1) FileName or (2) Filter argument.
Affected configurations
• iconics dialog wrapper module activex control (<= 8.4.165.0)
References
- http://osvdb.org/32552 osvdb.org
- http://secunia.com/advisories/23583 Vendor Advisory
- http://www.kb.cert.org/vuls/id/251969 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/21849 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0025 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31228 exchange.xforce.ibmcloud.com
- http://osvdb.org/32552 osvdb.org
- http://secunia.com/advisories/23583 Vendor Advisory
- http://www.kb.cert.org/vuls/id/251969 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/21849 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0025 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31228 exchange.xforce.ibmcloud.com