Approved changes feed: RSS · Atom

cpe:2.3:a:w3c:amaya:9.4:*:*:*:*:*:*:*

part: a version: 9.4 update: *

VendorW3C (62e9f25e-7fc3-5790-8300-1ced91cdb7b8)
ProductAmaya (b71ec2cc-9baf-5a32-8a9e-47304626bc9c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/w3c/amaya-editor purl2cpe 2026-06-01 10:11:50.058286

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-1900 vulnerable 2026-06-08 04:48:58.334536 Details available
Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before 8.8.5, allow remote attackers to execute arbitrary code via a long value in (1) the COMPACT attribute of the COLGROUP element, (2) the ROWS attribute of the TEXTAREA element, and (3) the COLOR attribute of the LEGEND element; and via other unspecified attack vectors consisting of "dozens of possible snippets."
Published: 2006-04-20T10:00:00.000Z
Updated: 2024-08-07T17:27:29.459Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.