CVE-2006-0618

Published: Feb 9, 2006Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifiers in the zeroth argument (program name).

Affected (1)

Products: Qnx: Neutrino Rtos

Qnx

1 product

Neutrino Rtos

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Qnx Neutrino Rtos	Version 6.3.0

References (14)

http://secunia.com/advisories/18750

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1015599

Source: cve@mitre.org

http://www.idefense.com/intelligence/vulnerabilities/display.php?id=380

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/22966

Source: cve@mitre.org

http://www.securityfocus.com/bid/16539

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0474

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24559

Source: cve@mitre.org

http://secunia.com/advisories/18750