# CVEs published 2006-05-18

7 CVEs were published on May 18, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-2458](https://cve.now/CVE-2006-2458.md): Multiple heap-based buffer overflows in Libextractor 0.5.13 and earlier allow remote attackers to execute arbitrary code via (1) the asf\_rea (no CVSS, extractor)
- [CVE-2006-1528](https://cve.now/CVE-2006-1528.md): Linux kernel before 2.6.13 allows local users to cause a denial of service (crash) via a dio transfer from the sg driver to memory mapped (m (no CVSS)
- [CVE-2006-1855](https://cve.now/CVE-2006-1855.md): choose\_new\_parent in Linux kernel before 2.6.11.12 includes certain debugging code, which allows local users to cause a denial of service (p (no CVSS)
- [CVE-2006-2440](https://cve.now/CVE-2006-2440.md): Heap-based buffer overflow in the libMagick component of ImageMagick 6.0.6.2 might allow attackers to execute arbitrary code via an image in (no CVSS)
- [CVE-2006-2441](https://cve.now/CVE-2006-2441.md): Pioneers meta-server before 0.9.55, when the server-console is not installed, allows remote attackers to cause a denial of service (crash) v (no CVSS)
- [CVE-2006-2442](https://cve.now/CVE-2006-2442.md): kphone 4.2 creates .qt/kphonerc with world-readable permissions, which allows local users to read usernames and SIP passwords. (no CVSS)
- [CVE-2006-2443](https://cve.now/CVE-2006-2443.md): The Debian package of knowledgetree 2.0.7 creates environment.php with world-readable permissions, which allows local users to obtain sensit (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-05-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.