CVE-2006-2154

high

Description

EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 does not drop privileges before opening files, which allows local users to execute arbitrary code via the File>Open dialog.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/26226

http://www.vupen.com/english/advisories/2006/1612

http://www.securityfocus.com/bid/17798

http://secunia.com/advisories/19850

http://kb.dantz.com/display/2n/articleDirect/index.asp?aid=9507&r=0.7344324

Details

Source: Mitre, NVD

Published: 2006-05-03

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H