CVE-2006-6410

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-12-10 · updated 2026-06-16

Description

Buffer overflow in an ActiveX control in VMWare 5.5.1 allows local users to execute arbitrary code via a long VmdbDb parameter to the Initialize function.

Affected products

VMware Workstation: 5.5.1

References

http://securityreason.com/securityalert/2008
http://www.open-security.org/advisories/17
http://www.securityfocus.com/archive/1/452746/100/100/threaded
http://www.securityfocus.com/archive/1/452775/100/100/threaded
http://www.securityfocus.com/bid/19732
https://www.exploit-db.com/exploits/2264
http://securityreason.com/securityalert/2008
http://www.open-security.org/advisories/17
http://www.securityfocus.com/archive/1/452746/100/100/threaded
http://www.securityfocus.com/archive/1/452775/100/100/threaded
http://www.securityfocus.com/bid/19732
https://www.exploit-db.com/exploits/2264

Get alerted when CVE-2006-6410 or the next vulnerability affects your stack