Skip to content
OpenAdvisories
Unscored CVE-2006-2708 EUVD-2006-2707GHSA-x529-qmqv-w7q9

Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 allows remote attackers to read portions of process memory via a modified size…

Published May 31, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 allows remote attackers to read portions of process memory via a modified size for (1) EM_GET_CE_PARAMETER and (2) EM_SET_CE_PARAMETER messages, which leads to a buffer overflow (probably an over-read).

References