Vulnerabilities > CVE-2006-1356 - Buffer Overflow vulnerability in Andrew HSU Libvc and Rolo

047910
CVSS 5.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
high complexity
andrew-hsu
exploit available
NVD
Published: 2006-03-22
Updated: 2017-07-20

Summary

Stack-based buffer overflow in the count_vcards function in LibVC 3, as used in Rolo, allows user-assisted attackers to execute arbitrary code via a vCard file (e.g. contacts.vcf) containing a long line.

Vulnerable Configurations

Part Description Count
Application
Andrew_Hsu
2

Exploit-Db

descriptionLibVC VCard 003 Processing Buffer Overflow Vulnerability. CVE-2006-1356 . Dos exploits for multiple platform
idEDB-ID:27474
last seen2016-02-03
modified2006-03-21
published2006-03-21
reportertrew
sourcehttps://www.exploit-db.com/download/27474/
titleLibVC VCard 003 Processing Buffer Overflow Vulnerability

References