CVE ID:	CVE-2006-1900
Description:	Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before 8.8.5, allow remote attackers to execute arbitrary code via a long value in (1) the COMPACT attribute of the COLGROUP element, (2) the ROWS attribute of the TEXTAREA element, and (3) the COLOR attribute of the LEGEND element; and via other unspecified attack vectors consisting of "dozens of possible snippets."
Test IDs:	1.3.6.1.4.1.25623.1.0.56650
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2006-1900 BugTraq ID: 17507 http://www.securityfocus.com/bid/17507 Bugtraq: 20060412 [BuHa-Security] Stack Based Buffer Overflow Vulnerability in Amaya 9.4 (Google Search) http://www.securityfocus.com/archive/1/430877/100/0/threaded Bugtraq: 20060412 [BuHa-Security] Stack Based Buffer Overflow Vulnerability in Amaya 9.4 #2 (Google Search) http://www.securityfocus.com/archive/1/430879/100/0/threaded http://morph3us.org/advisories/20060412-amaya-94-2.txt http://morph3us.org/advisories/20060412-amaya-94.txt http://www.osvdb.org/24623 http://www.osvdb.org/24624 http://secunia.com/advisories/19670 http://www.vupen.com/english/advisories/2006/1351 XForce ISS Database: amaya-various-attribute-bo(25791) https://exchange.xforce.ibmcloud.com/vulnerabilities/25791