Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: December 2006

62 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2006-5854
    47Plan

    Multiple buffer overflows in the Spooler service (nwspool.dll) in Novell Netware Client 4.91 through 4.91 SP2 allow remote attackers to exec

    HighCVSS 7.5Proof of conceptEPSS 57%

    novell · netware clientDec 3, 2006

  • CVE-2006-6236
    43Plan

    Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary co

    CriticalCVSS 9.3No exploitEPSS 20%

    adobe · acrobat readerDec 3, 2006

  • CVE-2006-6251
    50Plan

    Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long string in an M3U file,

    HighCVSS 7.5WeaponizedEPSS 67%

    vuplayer · vuplayerDec 4, 2006

  • CVE-2006-6252
    20Monitor

    Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service (

    MediumCVSS 4.3No exploitEPSS 11%

    microsoft · windows live messengerDec 4, 2006

  • CVE-2006-6263
    31Monitor

    Teredo clients, when source routing is enabled, recognize a Routing header in an encapsulated IPv6 packet and send the packet to the next ho

    MediumCVSS 6.8No exploitEPSS 12%

    microsoft · teredoDec 4, 2006

  • CVE-2006-6264
    34Monitor

    Teredo creates trusted peer entries for arbitrary incoming source Teredo addresses, even if the low 32 bits represent an intranet address, w

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · teredoDec 4, 2006

  • CVE-2006-6266
    31Monitor

    Teredo clients, when following item 6 of RFC4380 section 5.2.3, start direct IPv6 connectivity tests (aka ping tests) in response to packets

    MediumCVSS 6.8No exploitEPSS 11%

    microsoft · teredoDec 4, 2006

  • CVE-2006-6287
    33Monitor

    Stack-based buffer overflow in AtomixMP3 2.3 and earlier allows remote attackers to execute arbitrary code via a long pathname in an M3U fil

    HighCVSS 7.5Proof of conceptEPSS 10%

    atomix productions · atomixmp3Dec 4, 2006

  • CVE-2006-6293
    35Monitor

    Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code v

    HighCVSS 7.5Proof of conceptEPSS 16%

    f-prot · f-prot antivirusDec 5, 2006

  • CVE-2006-6296
    31Monitor

    The RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP

    MediumCVSS 6.1Proof of conceptEPSS 21%

    microsoft · windows 2000Dec 5, 2006

  • CVE-2006-5855
    48Plan

    Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause a denial o

    CriticalCVSS 10.0No exploitEPSS 26%

    ibm · tivoli storage managerDec 6, 2006

  • CVE-2006-5856
    31Monitor

    Stack-based buffer overflow in the Adobe Download Manager before 2.2 allows remote attackers to execute arbitrary code via a long section na

    MediumCVSS 6.8No exploitEPSS 14%

    adobe · download managerDec 6, 2006

  • CVE-2006-5994
    47Plan

    Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v.

    CriticalCVSS 9.3No exploitEPSS 32%

    microsoft · officeDec 6, 2006

  • CVE-2006-6310
    25Monitor

    Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (crash) via an invalid src attribute va

    MediumCVSS 5.0Proof of conceptEPSS 15%

    microsoft · internet explorerDec 6, 2006

  • CVE-2006-6311
    28Monitor

    Microsoft Internet Explorer 6.0.2900.2180 allows remote attackers to cause a denial of service via a style attribute in an HTML table tag wi

    MediumCVSS 5.0Proof of conceptEPSS 26%

    microsoft · internet explorerDec 6, 2006

  • CVE-2006-6334
    37Monitor

    Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows

    MediumCVSS 6.8Proof of conceptEPSS 34%

    citrix · presentation server clientDec 7, 2006

  • CVE-2006-6332
    36Monitor

    Stack-based buffer overflow in net80211/ieee80211_wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execute arbitrary code via

    HighCVSS 7.5Proof of conceptEPSS 20%

    madwifi · madwifiDec 10, 2006

  • CVE-2006-6421
    29Monitor

    Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated

    MediumCVSS 6.0Proof of conceptEPSS 15%

    phpbb group · phpbbDec 10, 2006

  • CVE-2006-6379
    36Monitor

    Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserv

    HighCVSS 7.5Proof of conceptEPSS 21%

    broadcom · brightstor arcserve backupDec 10, 2006

  • CVE-2006-6450
    37Monitor

    Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote

    HighCVSS 7.5No exploitEPSS 21%

    novell · zenworks patch management serverDec 10, 2006

  • CVE-2006-6456
    47Plan

    Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecifie

    CriticalCVSS 9.3No exploitEPSS 32%

    microsoft · officeDec 11, 2006

  • CVE-2006-6478
    33Monitor

    Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parame

    HighCVSS 7.5Proof of conceptEPSS 10%

    scriptphp · annoncescripthpDec 11, 2006

  • CVE-2006-6423
    61This week

    Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.

    CriticalCVSS 10.0WeaponizedEPSS 70%

    mailenable · mailenable enterpriseDec 11, 2006

  • CVE-2006-5577
    25Monitor

    Microsoft Internet Explorer 6 and earlier allows remote attackers to obtain sensitive information via unspecified uses of the OBJECT HTML ta

    MediumCVSS 4.3No exploitEPSS 25%

    microsoft · ieDec 12, 2006

  • CVE-2006-5578
    17Monitor

    Microsoft Internet Explorer 6 and earlier allows remote attackers to read Temporary Internet Files (TIF) and obtain sensitive information vi

    LowCVSS 2.6No exploitEPSS 21%

    microsoft · ieDec 12, 2006

  • CVE-2006-5579
    47Plan

    Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using JavaScript to cause certain errors simultaneously,

    CriticalCVSS 9.3No exploitEPSS 31%

    microsoft · windows server 2003Dec 12, 2006

  • CVE-2006-5581
    48Plan

    Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via certain DHTML script functi

    CriticalCVSS 9.3No exploitEPSS 36%

    microsoft · internet explorerDec 12, 2006

  • CVE-2006-5583
    56Plan

    Buffer overflow in the SNMP Service in Microsoft Windows 2000 SP4, XP SP2, Server 2003, Server 2003 SP1, and possibly other versions allows

    CriticalCVSS 10.0No exploitEPSS 53%

    microsoft · windows 2003 serverDec 12, 2006

  • CVE-2006-6335
    44Plan

    Multiple buffer overflows in Sophos Anti-Virus scanning engine before 2.40 allow remote attackers to execute arbitrary code via (1) a SIT ar

    CriticalCVSS 10.0No exploitEPSS 12%

    sophos · sophos anti-virusDec 12, 2006

  • CVE-2006-2386
    36Monitor

    Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact

    MediumCVSS 6.8No exploitEPSS 28%

    microsoft · outlook expressDec 12, 2006

  • CVE-2006-4702
    35Monitor

    Buffer overflow in the Windows Media Format Runtime in Microsoft Windows Media Player (WMP) 6.4 and Windows XP SP2, Server 2003, and Server

    MediumCVSS 6.8No exploitEPSS 27%

    microsoft · windows media playerDec 12, 2006

  • CVE-2006-5584
    39Monitor

    The Remote Installation Service (RIS) in Microsoft Windows 2000 SP4 uses a TFTP server that allows anonymous access, which allows remote att

    HighCVSS 7.5No exploitEPSS 31%

    microsoft · windows 2000Dec 12, 2006

  • CVE-2006-6561
    49Plan

    Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code

    CriticalCVSS 9.3Proof of conceptEPSS 41%

    microsoft · officeDec 14, 2006

  • CVE-2006-5822
    44Plan

    Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, an

    CriticalCVSS 10.0No exploitEPSS 11%

    symantec · veritas netbackup clientDec 14, 2006

  • CVE-2006-6222
    44Plan

    Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, an

    CriticalCVSS 10.0No exploitEPSS 12%

    symantec · veritas netbackup clientDec 14, 2006

  • CVE-2006-6565
    40Plan

    FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to the (1) LIST or (2) N

    MediumCVSS 4.0WeaponizedEPSS 70%

    filezilla-project · filezilla serverDec 15, 2006

  • CVE-2006-6576
    50Plan

    Heap-based buffer overflow in Golden FTP Server (goldenftpd) 1.92 allows remote attackers to cause a denial of service (application crash) a

    HighCVSS 7.5WeaponizedEPSS 67%

    goldenftpserver · golden ftp serverDec 15, 2006

  • CVE-2006-6601
    22Monitor

    Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service via a .MID

    MediumCVSS 4.3Proof of conceptEPSS 18%

    windows · media playerDec 15, 2006

  • CVE-2006-6602
    21Monitor

    explorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of servi

    MediumCVSS 4.3Proof of conceptEPSS 14%

    microsoft · windows explorerDec 15, 2006

  • CVE-2006-6617
    32Monitor

    projectserver/logon/pdsrequest.asp in Microsoft Project Server 2003 allows remote authenticated users to obtain the MSProjectUser password f

    MediumCVSS 6.5No exploitEPSS 20%

    microsoft · project serverDec 18, 2006

  • CVE-2006-6652
    42Plan

    Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* before 20061203, and Apple

    CriticalCVSS 9.0Proof of conceptEPSS 20%

    apple · mac os xDec 19, 2006

  • CVE-2006-6659
    25Monitor

    The Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2 allows remote attackers to cause a denial of service (I

    MediumCVSS 5.0Proof of conceptEPSS 17%

    microsoft · ieDec 19, 2006

  • CVE-2006-6665
    40Plan

    Buffer overflow in Astonsoft DeepBurner Pro and Free 1.8.0 and earlier allows user-assisted remote attackers to execute arbitrary code via a

    MediumCVSS 6.8WeaponizedEPSS 30%

    astonsoft · deepburnerDec 20, 2006

  • CVE-2006-6697
    34Monitor

    CRLF injection vulnerability in webapp/jsp/calendar.jsp in Oracle Portal 10g and earlier, including 9.0.2, allows remote attackers to inject

    HighCVSS 7.5Proof of conceptEPSS 13%

    oracle · application server portalDec 21, 2006

  • CVE-2006-6707
    47Plan

    Stack-based buffer overflow in the NeoTraceExplorer.NeoTraceLoader ActiveX control (NeoTraceExplorer.dll) in NeoTrace Express 3.25 and NeoTr

    HighCVSS 7.5WeaponizedEPSS 56%

    mcafee · neotraceDec 22, 2006

  • CVE-2006-6723
    42Plan

    The Workstation service in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to cause a denial of service (memory consumption) v

    HighCVSS 7.8Proof of conceptEPSS 37%

    microsoft · windows 2000Dec 26, 2006

  • CVE-2006-6424
    54Plan

    Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code (1) by appending literals to

    CriticalCVSS 9.0WeaponizedEPSS 60%

    novell · netmailDec 26, 2006

  • CVE-2006-6425
    53Plan

    Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbi

    CriticalCVSS 9.0WeaponizedEPSS 58%

    novell · netmailDec 26, 2006

  • CVE-2006-6761
    42Plan

    Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbi

    MediumCVSS 6.5WeaponizedEPSS 53%

    novell · netmailDec 26, 2006

  • CVE-2006-6811
    29Monitor

    KsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG string when connecting to an Internet Relay Cha

    MediumCVSS 6.5Proof of conceptEPSS 10%

    kde · ksircDec 29, 2006

  • CVE-2006-1305
    27Monitor

    Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service (memory exhaustion and interrupted

    MediumCVSS 4.3No exploitEPSS 32%

    microsoft · officeDec 31, 2006

  • CVE-2006-4098
    44Plan

    Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engi

    CriticalCVSS 10.0No exploitEPSS 12%

    cisco · secure access control serverDec 31, 2006

  • CVE-2006-4695
    49Plan

    Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute ar

    CriticalCVSS 9.3No exploitEPSS 40%

    microsoft · office web componentsDec 31, 2006

  • CVE-2006-5265
    23Monitor

    Unspecified vulnerability in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allows remote attackers to cause a denial of serv

    MediumCVSS 5.0No exploitEPSS 10%

    microsoft · dynamics gpDec 31, 2006

  • CVE-2006-5266
    35Monitor

    Multiple buffer overflows in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allow remote attackers to execute arbitrary code

    HighCVSS 7.5No exploitEPSS 15%

    microsoft · dynamics gpDec 31, 2006

  • CVE-2006-5574
    44Plan

    Unspecified vulnerability in the Brazilian Portuguese Grammar Checker in Microsoft Office 2003 and the Multilingual Interface for Office 200

    CriticalCVSS 9.3No exploitEPSS 24%

    microsoft · officeDec 31, 2006

  • CVE-2006-5858
    24Monitor

    Adobe ColdFusion MX 7 through 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote attackers to read arbitrary files, list directorie

    MediumCVSS 5.0No exploitEPSS 13%

    adobe · coldfusionDec 31, 2006

  • CVE-2006-6863
    43Plan

    PHP remote file inclusion vulnerability in the Enigma2 plugin (Enigma2.php) in Enigma WordPress Bridge allows remote attackers to execute ar

    CriticalCVSS 9.8Proof of conceptEPSS 13%

    enigma · wordpress bridgeDec 31, 2006

  • CVE-2006-6901
    44Plan

    Unspecified vulnerability in the Bluetooth stack in Microsoft Windows allows remote attackers to gain administrative access (aka Remote Root

    CriticalCVSS 10.0No exploitEPSS 14%

    microsoft · windows 2003 serverDec 31, 2006

  • CVE-2006-6902
    44Plan

    Unspecified vulnerability in the Bluetooth stack in Microsoft Windows Mobile Pocket PC edition allows remote attackers to gain administrativ

    CriticalCVSS 10.0No exploitEPSS 14%

    microsoft · windows 2003 serverDec 31, 2006

  • CVE-2006-6908
    49Plan

    Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as Widcomm Stack 3.x and earlier on Windows, W

    CriticalCVSS 10.0No exploitEPSS 30%

    broadcom · widcomm bluetoothDec 31, 2006

  • CVE-2006-6917
    49Plan

    Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup R11.5 Server before SP2 allows remote attackers to execute

    CriticalCVSS 10.0Proof of conceptEPSS 30%

    broadcom · brightstor arcserve backup serverDec 31, 2006