CVE-2006-3350 - Vulnerability Details - OpenCVE

Stack-based buffer overflow in AutoVue SolidModel Professional Desktop Edition 19.1 Build 5993 allows user-assisted remote attackers to execute arbitrary code via a long filename in a (1) ARJ, (2) RAR, or (3) ZIP archive.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity High

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Cimmetry Systems	Autovue Solidmodel Professional

Configuration 1 [-]

cpe:2.3:a:cimmetry_systems:autovue_solidmodel_professional:desktop_edition_19.1_build_5993:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://secunia.com/advisories/20852
http://secunia.com/secunia_research/2006-56/advisory/
http://www.osvdb.org/27516
http://www.securityfocus.com/archive/1/441173/100/0/threaded
http://www.securityfocus.com/bid/19170
http://www.vupen.com/english/advisories/2006/2979
https://exchange.xforce.ibmcloud.com/vulnerabilities/27968

History

No history.

MITRE

Status: PUBLISHED

Assigner: flexera

Published: 2006-07-28T00:00:00

Updated: 2024-08-07T18:23:21.271Z

Reserved: 2006-07-05T00:00:00

Link: CVE-2006-3350

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2006-07-28T00:04:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2006-3350

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-07-26T00:00:00", "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in AutoVue SolidModel Professional Desktop Edition 19.1 Build 5993 allows user-assisted remote attackers to execute arbitrary code via a long filename in a (1) ARJ, (2) RAR, or (3) ZIP archive."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-18T14:57:01", "orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab", "shortName": "flexera"}, "references": [{"name": "autovue-filename-bo(27968)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27968"}, {"name": "27516", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/27516"}, {"name": "19170", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/19170"}, {"tags": ["x_refsource_MISC"], "url": "http://secunia.com/secunia_research/2006-56/advisory/"}, {"name": "20852", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20852"}, {"name": "20060726 Secunia Research: AutoVue SolidModel Professional Buffer OverflowVulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/441173/100/0/threaded"}, {"name": "ADV-2006-2979", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/2979"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "PSIRT-CNA@flexerasoftware.com", "ID": "CVE-2006-3350", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Stack-based buffer overflow in AutoVue SolidModel Professional Desktop Edition 19.1 Build 5993 allows user-assisted remote attackers to execute arbitrary code via a long filename in a (1) ARJ, (2) RAR, or (3) ZIP archive."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "autovue-filename-bo(27968)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27968"}, {"name": "27516", "refsource": "OSVDB", "url": "http://www.osvdb.org/27516"}, {"name": "19170", "refsource": "BID", "url": "http://www.securityfocus.com/bid/19170"}, {"name": "http://secunia.com/secunia_research/2006-56/advisory/", "refsource": "MISC", "url": "http://secunia.com/secunia_research/2006-56/advisory/"}, {"name": "20852", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20852"}, {"name": "20060726 Secunia Research: AutoVue SolidModel Professional Buffer OverflowVulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/441173/100/0/threaded"}, {"name": "ADV-2006-2979", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/2979"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T18:23:21.271Z"}, "title": "CVE Program Container", "references": [{"name": "autovue-filename-bo(27968)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27968"}, {"name": "27516", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/27516"}, {"name": "19170", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/19170"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://secunia.com/secunia_research/2006-56/advisory/"}, {"name": "20852", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20852"}, {"name": "20060726 Secunia Research: AutoVue SolidModel Professional Buffer OverflowVulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/441173/100/0/threaded"}, {"name": "ADV-2006-2979", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/2979"}]}]}, "cveMetadata": {"assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab", "assignerShortName": "flexera", "cveId": "CVE-2006-3350", "datePublished": "2006-07-28T00:00:00", "dateReserved": "2006-07-05T00:00:00", "dateUpdated": "2024-08-07T18:23:21.271Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cimmetry_systems:autovue_solidmodel_professional:desktop_edition_19.1_build_5993:*:*:*:*:*:*:*", "matchCriteriaId": "5303DC7B-C9C4-49D8-AEB0-8C40C2A8958F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in AutoVue SolidModel Professional Desktop Edition 19.1 Build 5993 allows user-assisted remote attackers to execute arbitrary code via a long filename in a (1) ARJ, (2) RAR, or (3) ZIP archive."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer basado en pila en AutoVue SolidModel Professional Desktop Edition 19.1 Build 5993 permite atacantes con la intervenci\u00f3n del usuario ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de nombres de fichero en archivos (1) ARJ, (2) RAR, o (3) ZIP.\r\n"}], "id": "CVE-2006-3350", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 4.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": true, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2006-07-28T00:04:00.000", "references": [{"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/20852"}, {"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/secunia_research/2006-56/advisory/"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.osvdb.org/27516"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.securityfocus.com/archive/1/441173/100/0/threaded"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.securityfocus.com/bid/19170"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.vupen.com/english/advisories/2006/2979"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27968"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/20852"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/secunia_research/2006-56/advisory/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/27516"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/441173/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/19170"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/2979"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27968"}], "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}