CVE-2006-2154

CVSS 7.2 - HIGH

Description

EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 does not drop privileges before opening files, which allows local users to execute arbitrary code via the File>Open dialog.

Affected Products

Vendor	Product	Version
emc	retrospect	`All versions`
emc	retrospect	`All versions`
emc	retrospect	`All versions`

References

http://kb.dantz.com/display/2n/articleDirect/index...

http://secunia.com/advisories/19850

http://www.securityfocus.com/bid/17798

http://www.vupen.com/english/advisories/2006/1612

https://exchange.xforce.ibmcloud.com/vulnerabiliti...

http://kb.dantz.com/display/2n/articleDirect/index...

http://secunia.com/advisories/19850

http://www.securityfocus.com/bid/17798

http://www.vupen.com/english/advisories/2006/1612

https://exchange.xforce.ibmcloud.com/vulnerabiliti...

Weakness Types

NVD-CWE-Other

CVE Information

CVE ID:: CVE-2006-2154
Published:: 2006-05-03
Modified:: 2026-04-16
CVSS Score:: 7.2
Severity:: HIGH
Vector:: AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected Vendors

emc

Quick Actions

View on NVD Find Similar CVEs

CVSS Severity Scale

0.0 - 3.9 LOW

4.0 - 6.9 MEDIUM

7.0 - 8.9 HIGH

9.0 - 10.0 CRITICAL