CVE-2006-0618 Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifiers in the zeroth argument (program name).
MediumCVSS 4.6
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifiers in the zeroth argument (program name).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qnx neutrino rtos | = 6.3.0 | No fix listed |
References
- 18750 third-party-advisory vendor-advisory
- 1015599 vdb-entry
- 20060207 QNX Neutrino RTOS fontsleuth Command Format String Vulnerability third-party-advisory vendor-advisory
- 22966 vdb-entry
- 16539 vdb-entry
- ADV-2006-0474 vdb-entry
- qnx-fontsleuth-format-string(24559) vdb-entry