# CVEs published 2006-12-13

8 CVEs were published on December 13, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-6496](https://cve.now/CVE-2006-6496.md): The (1) VetMONNT.sys and (2) VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Internet Security Suite 2 (no CVSS)
- [CVE-2006-2386](https://cve.now/CVE-2006-2386.md): Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact (no CVSS)
- [CVE-2006-4702](https://cve.now/CVE-2006-4702.md): Buffer overflow in the Windows Media Format Runtime in Microsoft Windows Media Player (WMP) 6.4 and Windows XP SP2, Server 2003, and Server (no CVSS)
- [CVE-2006-5584](https://cve.now/CVE-2006-5584.md): The Remote Installation Service (RIS) in Microsoft Windows 2000 SP4 uses a TFTP server that allows anonymous access, which allows remote att (no CVSS)
- [CVE-2006-5585](https://cve.now/CVE-2006-5585.md): The Client-Server Run-time Subsystem in Microsoft Windows XP SP2 and Server 2003 allows local users to gain privileges via a crafted file ma (no CVSS)
- [CVE-2006-6494](https://cve.now/CVE-2006-6494.md): Directory traversal vulnerability in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via a .. (no CVSS)
- [CVE-2006-6495](https://cve.now/CVE-2006-6495.md): Stack-based buffer overflow in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via large precision padding (no CVSS)
- [CVE-2006-6493](https://cve.now/CVE-2006-6493.md): Buffer overflow in the krbv4\_ldap\_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP is compiled with th (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-12-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.