Home > Vulnerability Database > CVE-2006-7234

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2006-7234

Date: October 27, 2008

Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2) mime.types files in the current working directory.

Severity Score

4.9

Related Resources (16)

Url: https://nvd.nist.gov/vuln/detail/CVE-2006-7234

Url: http://www.openwall.com/lists/oss-security/2008/10/25/3

Url: http://www.securityfocus.com/bid/31917

Url: http://secunia.com/advisories/33568

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2008:217

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2006-7234

Url: http://secunia.com/advisories/32416

Url: http://www.redhat.com/support/errata/RHSA-2008-0965.html

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/46132

Url: http://secunia.com/advisories/32407

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9719

Url: https://bugzilla.redhat.com/show_bug.cgi?id=214205

Url: http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html

Url: http://www.securitytracker.com/id?1021107

Url: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=396949

Url: https://www.mend.io/vulnerability-database/CVE-2006-7234

Severity Score

4.9

CVSS v3.1

Base Score:	4.9
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	4.6
Access Vector (AV):	LOCAL
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Do you need more information?

Contact Us