CVE-2006-1515

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in the addnewword function in typespeed 0.4.4 and earlier might allow remote attackers to execute arbitrary code via unknown vectors.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/20379Vendor Advisory
http://secunia.com/advisories/20393Patch, Vendor Advisory
http://secunia.com/advisories/20708
http://www.debian.org/security/2006/dsa-1084Patch, Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200606-20.xml
http://www.securityfocus.com/bid/18194
http://www.vupen.com/english/advisories/2006/2087
http://secunia.com/advisories/20379Vendor Advisory
http://secunia.com/advisories/20393Patch, Vendor Advisory
http://secunia.com/advisories/20708
http://www.debian.org/security/2006/dsa-1084Patch, Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200606-20.xml
http://www.securityfocus.com/bid/18194
http://www.vupen.com/english/advisories/2006/2087

Timeline

Published: May 31, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-15165.0The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attacker CVE-2006-15175.0sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information CVE-2006-15186.5Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code CVE-2006-15206.4Format string vulnerability in ANSI C Sender Policy Framework library (libspf) before 1.0.0-p5, when debugging is enabled, allows remote att CVE-2006-15224.9The sys_add_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and possibly earlier versions, allows local users to c CVE-2006-152310.0The __group_complete_signal function in the RCU signal handling (signal.c) in Linux kernel 2.6.16, and possibly other versions, has unknown CVE-2006-15243.6madvise_remove in Linux kernel 2.6.16 up to 2.6.16.6 does not follow file and mmap restrictions, which allows local users to bypass IPC perm CVE-2006-15254.9ip_route_input in Linux kernel 2.6 before 2.6.16.8 allows local users to cause a denial of service (panic) via a request for a route for a m CVE-2006-15262.1Buffer overflow in the X render (Xrender) extension in X.org X server 6.8.0 up to allows attackers to cause a denial of service (crash), as CVE-2006-15275.0The SCTP-netfilter code in Linux kernel before 2.6.16.13 allows remote attackers to trigger a denial of service (infinite loop) via unknown CVE-2006-15284.9Linux kernel before 2.6.13 allows local users to cause a denial of service (crash) via a dio transfer from the sg driver to memory mapped (m CVE-2006-15297.5Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial o