CVE-2006-2007

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

4.69%

Published

Apr 25, 2006

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Heap-based buffer overflow in Winny 2.0 b7.1 and earlier allows remote attackers to execute arbitrary code via long strings to certain commands sent to the file transfer port.

Affected Products (2)

winny · winnyvulnerable

References (16)

http://jvn.jp/jp/JVN%2374294680/index.html

http://secunia.com/advisories/19795

Vendor Advisory

http://www.eeye.com/html/research/advisories/AD20060421.html

Vendor Advisory

http://www.kb.cert.org/vuls/id/167033

US Government Resource

http://www.osvdb.org/24883

http://www.securityfocus.com/bid/17666

http://www.vupen.com/english/advisories/2006/1486

https://exchange.xforce.ibmcloud.com/vulnerabilities/25986

http://jvn.jp/jp/JVN%2374294680/index.html

http://secunia.com/advisories/19795

Vendor Advisory

http://www.eeye.com/html/research/advisories/AD20060421.html

Vendor Advisory

http://www.kb.cert.org/vuls/id/167033

US Government Resource

http://www.osvdb.org/24883

http://www.securityfocus.com/bid/17666

http://www.vupen.com/english/advisories/2006/1486

https://exchange.xforce.ibmcloud.com/vulnerabilities/25986

KEV Catalog EPSS Scores Vendors All CVEs