CVE-2006-6488

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-12-31 · updated 2026-06-16

Description

Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control (DlgWrapper.dll) before 8.4.166.0, as used by ICONICS OPC Enabled Gauge, Switch, and Vessel ActiveX, allows remote attackers to execute arbitrary code via a long (1) FileName or (2) Filter argument.

Affected products

ICONICS Dialog Wrapper Module Activex Control: through 8.4.165.0

References

http://osvdb.org/32552
http://secunia.com/advisories/23583
http://www.kb.cert.org/vuls/id/251969
http://www.securityfocus.com/bid/21849
http://www.vupen.com/english/advisories/2007/0025
https://exchange.xforce.ibmcloud.com/vulnerabilities/31228
http://osvdb.org/32552
http://secunia.com/advisories/23583
http://www.kb.cert.org/vuls/id/251969
http://www.securityfocus.com/bid/21849
http://www.vupen.com/english/advisories/2007/0025
https://exchange.xforce.ibmcloud.com/vulnerabilities/31228

Get alerted when CVE-2006-6488 or the next vulnerability affects your stack