Vulnerability Details CVE-2006-0618
Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifiers in the zeroth argument (program name).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 32.8%
CVSS Severity
CVSS v2 Score 4.6
References
- http://secunia.com/advisories/18750
- http://securitytracker.com/id?1015599
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=380
- http://www.osvdb.org/22966
- http://www.securityfocus.com/bid/16539
- http://www.vupen.com/english/advisories/2006/0474
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24559
- http://secunia.com/advisories/18750
- http://securitytracker.com/id?1015599
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=380
- http://www.osvdb.org/22966
- http://www.securityfocus.com/bid/16539
- http://www.vupen.com/english/advisories/2006/0474
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24559
Products affected by CVE-2006-0618
-
cpe:2.3:a:qnx:neutrino_rtos:6.3.0