CVE-2006-2549

Stack-based buffer overflow in PDF Form Filling and Flattening Tool before 3.1.0.12 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via long field names.

• http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046292.html
• http://secunia.com/advisories/20233Vendor Advisory
• http://www.osvdb.org/25902
• http://www.securityfocus.com/archive/1/434992/30/4770/threaded
• http://www.vsecurity.com/bulletins/advisories/2006/pdf-form-filling.txtExploit, Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2006/1960
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26604
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046292.html
• http://secunia.com/advisories/20233Vendor Advisory
• http://www.osvdb.org/25902
• http://www.securityfocus.com/archive/1/434992/30/4770/threaded
• http://www.vsecurity.com/bulletins/advisories/2006/pdf-form-filling.txtExploit, Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2006/1960
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26604

Published

May 24, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-2543Xtreme Topsites 1.1 allows remote attackers to trigger MySQL…
• CVE-2006-2544Multiple SQL injection vulnerabilities in Xtreme Topsites 1.…
• CVE-2006-2545Multiple cross-site scripting (XSS) vulnerabilities in Xtrem…
• CVE-2006-2546A recommended admin password reset mechanism for BEA WebLogi…
• CVE-2006-2547Unspecified vulnerability in the sapdba command in SAP with …
• CVE-2006-2548Prodder before 0.5, and perlpodder before 0.5, allows remote…
• CVE-2006-2550perlpodder before 0.5 allows remote attackers to execute arb…
• CVE-2006-2551Unspecified vulnerability in the kernel in HP-UX B.11.00 all…
• CVE-2006-2552Jemscripts DownloadControl 1.0 allows remote attackers to ob…
• CVE-2006-2553Cross-site scripting (XSS) vulnerability in Jemscripts Downl…
• CVE-2006-2554Buffer overflow in the tell_player_surr_changes function in …
• CVE-2006-2555The parse_command function in Genecys 0.2 and earlier allows…