CVE-2006-4692
NoneCVSS
—
EPSS
29.7%
Published
Oct 10, 2006
CISA due date
—
The record
Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a "/" (slash) character in the filename of the Command Line property, followed by a valid file extension, which causes the command before the slash to be executed, aka "Object Packager Dialogue Spoofing Vulnerability."
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-79675 NLTK before 3.10.3 fails to validate JVM options passed through the per-call options… CWE-88
- CVE-2026-78676 GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during… CWE-88
- CVE-2026-78678 GitPython versions before 3.1.59 contain an incomplete denylist in the… CWE-88
- CVE-2026-76219 GitPython versions before 3.1.58 contain an arbitrary file overwrite vulnerability in… CWE-88
- CVE-2026-76218 GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that… CWE-88
- CVE-2026-76220 GitPython before 3.1.58 contains a command execution vulnerability in the… CWE-88
- CVE-2026-73624 GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the… CWE-88
- CVE-2026-73621 GitPython before 3.1.56 contains an argument injection vulnerability in the… CWE-88