cbcvebase.
CVE-2006-3409
published 2006-07-07

CVE-2006-3409: Integer overflow in Tor before 0.1.1.20 allows remote attackers to execute arbitrary code via crafted large inputs, which result in a buffer overflow when…

high7.5CVSS 3.1
AVNACLAuNCPIPAP
Integer overflow in Tor before 0.1.1.20 allows remote attackers to execute arbitrary code via crafted large inputs, which result in a buffer overflow when elements are added to smartlists.

Affected

73 ranges· showing 25
VendorProductVersion rangeFixed in
debiantor< tor 0.1.1.20-1 (bookworm)tor 0.1.1.20-1 (bookworm)
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor
tortor

CVSS provenance

nvd7.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH