CVE-2006-4070 Format string vulnerability in Imendio Planner 0.13 allows user-assisted attackers to execute arbitrary code via format string specifiers in a filename.
MediumCVSS 5.1
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in Imendio Planner 0.13 allows user-assisted attackers to execute arbitrary code via format string specifiers in a filename.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| imendio planner | = 0.13 | No fix listed |
References
- 1361 third-party-advisory
- 20060807 IMENDIO PLANNER REMOTE FILENAME FORMAT STRING VULNERABILITY mailing-list
- 19307 vdb-entry