CVE-2006-7157

Buffer overflow in Google Earth v4.0.2091 (beta) allows remote user-assisted attackers to cause a denial of service (crash) via a KML or KMZ file with a long href element.

• CWE-119

• http://marc.info/?l=full-disclosure&m=116068034629718&w=2Not Applicable
• http://securitydot.net/xpl/exploits/vulnerabilities/articles/1660/exploit.htmlBroken Link
• http://securityreason.com/securityalert/2375Not Applicable
• http://www.securityfocus.com/archive/1/448544/100/0/threaded
• http://www.securityfocus.com/bid/20464Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29502
• http://marc.info/?l=full-disclosure&m=116068034629718&w=2Not Applicable
• http://securitydot.net/xpl/exploits/vulnerabilities/articles/1660/exploit.htmlBroken Link
• http://securityreason.com/securityalert/2375Not Applicable
• http://www.securityfocus.com/archive/1/448544/100/0/threaded
• http://www.securityfocus.com/bid/20464Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29502

Published

Mar 7, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-7151Untrusted search path vulnerability in the libtool-ltdl libr…
• CVE-2006-7152default.asp in ASP-Nuke Community 1.5 and earlier allows rem…
• CVE-2006-7153PHP remote file inclusion vulnerability in index.php in Mini…
• CVE-2006-7154Iono allows remote attackers to obtain the full server path …
• CVE-2006-7155Novell BorderManager 3.8 SP4 generates the same ISAKMP cooki…
• CVE-2006-7156PHP remote file inclusion vulnerability in addon_keywords.ph…
• CVE-2006-7158Cross-site scripting (XSS) vulnerability in Oracle Applicati…
• CVE-2006-7159Directory traversal vulnerability in include/prune_torrents.…
• CVE-2006-7160The Sandbox.sys driver in Outpost Firewall PRO 4.0, and poss…
• CVE-2006-7161SQL injection vulnerability in giris_yap.asp in Hazir Site 2…
• CVE-2006-7162PuTTY 0.59 and earlier uses weak file permissions for (1) pp…
• CVE-2006-7163DreameeSoft Password Master 1.0 stores the database in an un…