CVE-2006-1172

Stack-based buffer overflow in the createPKCS10 function in Cryptomathic Cenroll ActiveX Control 1.1.0.0 allows remote attackers to execute arbitrary code via vectors related to the TDC Digital signature.

• http://cirt.dk/advisories/cirt-43-advisory.pdfVendor Advisory
• http://secunia.com/advisories/19968Patch, Vendor Advisory
• http://securitytracker.com/id?1016034Patch
• http://www.kb.cert.org/vuls/id/548689US Government Resource
• http://www.osvdb.org/25282Patch
• http://www.securityfocus.com/archive/1/433079/100/0/threaded
• http://www.securityfocus.com/bid/17852Exploit
• http://www.vupen.com/english/advisories/2006/1675
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26255
• http://cirt.dk/advisories/cirt-43-advisory.pdfVendor Advisory
• http://secunia.com/advisories/19968Patch, Vendor Advisory
• http://securitytracker.com/id?1016034Patch
• http://www.kb.cert.org/vuls/id/548689US Government Resource
• http://www.osvdb.org/25282Patch
• http://www.securityfocus.com/archive/1/433079/100/0/threaded
• http://www.securityfocus.com/bid/17852Exploit
• http://www.vupen.com/english/advisories/2006/1675
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26255

Published

May 9, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-1166Monotone 0.25 and earlier, when a user creates a file in a d…
• CVE-2006-1167SGI ProPack 3 SP6 kernel displays the frame buffer contents …
• CVE-2006-1168The decompress function in compress42.c in (1) ncompress 4.2…
• CVE-2006-1169Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2006-1170Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2006-1171Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2006-1173Sendmail before 8.13.7 allows remote attackers to cause a de…
• CVE-2006-1174useradd in shadow-utils before 4.0.3, and possibly other ver…
• CVE-2006-1175The WeOnlyDo! SFTP (wodSFTP) ActiveX control is marked as sa…
• CVE-2006-1176Buffer overflow in eBay Enhanced Picture Services (aka EPUIm…
• CVE-2006-1178Tamarack MMSd before 7.992 allows remote attackers to cause …
• CVE-2006-1182Adobe Graphics Server 2.0 and 2.1 (formerly AlterCast) and A…