Vulnerability in Casio Photo Loader
CVE-2006-3893
Multiple buffer overflows in the ActiveX controls in Newtone ImageKit 5 before Fix 30 and 6 before Fix 40, as used in CASIO Photo Loader software before 3.01 and possibly other software, allow remote attackers to execute arbitrary code via a crafted HTML document.
EPSS: 0.065 (93.1th percentile) — read the EPSS interpretation.
Affected products
- Casio Photo_loader — versions 3.00
- Newtone Imagekit — versions 5_fix_29, 6_fix_40
- N/a — versions n/a
References
- cret@cert.org (vdb-entry, x_refsource_VUPEN)
- cret@cert.org (Patch, vdb-entry, x_refsource_BID)
- cret@cert.org (vdb-entry, x_refsource_XF)
- cret@cert.org (x_refsource_SECUNIA, third-party-advisory)
- cret@cert.org (vdb-entry, x_refsource_VUPEN)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, Patch, third-party-advisory)