← Vulnerability feed

Vulnerability record · CVE-2006-1172 · published 9 May 2006

CVE-2006-1172: Tdc cryptomathic cenroll activex control vulnerability

Tdc · Cryptomathic Cenroll Activex Control

Stack-based buffer overflow in the createPKCS10 function in Cryptomathic Cenroll ActiveX Control 1.1.0.0 allows remote attackers to execute arbitrary code via vectors related to the TDC Digital signature.

5.0 CVSS 2.0 Medium EPSS 14% · top 3.5%
5.0CVSS 2.0 base score
14%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
18References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

Stack-based buffer overflow in the createPKCS10 function in Cryptomathic Cenroll ActiveX Control 1.1.0.0 allows remote attackers to execute arbitrary code via vectors related to the TDC Digital signature.

AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://cirt.dk/advisories/cirt-43-advisory.pdf Vendor Advisory
http://secunia.com/advisories/19968 PatchVendor Advisory
http://securitytracker.com/id?1016034 Patch
http://www.kb.cert.org/vuls/id/548689 US Government Resource
http://www.osvdb.org/25282 Patch
http://www.securityfocus.com/archive/1/433079/100/0/threaded
http://www.securityfocus.com/bid/17852 Exploit
http://www.vupen.com/english/advisories/2006/1675
https://exchange.xforce.ibmcloud.com/vulnerabilities/26255
http://cirt.dk/advisories/cirt-43-advisory.pdf Vendor Advisory
http://secunia.com/advisories/19968 PatchVendor Advisory
http://securitytracker.com/id?1016034 Patch
http://www.kb.cert.org/vuls/id/548689 US Government Resource
http://www.osvdb.org/25282 Patch
http://www.securityfocus.com/archive/1/433079/100/0/threaded
http://www.securityfocus.com/bid/17852 Exploit
http://www.vupen.com/english/advisories/2006/1675
https://exchange.xforce.ibmcloud.com/vulnerabilities/26255

Track CVE-2006-1172 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Source: NIST National Vulnerability Database (record CVE-2006-1172), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.