Vulnerability record · CVE-2006-6488 · published 31 December 2006
CVE-2006-6488: Iconics dialog wrapper module activex control vulnerability
Iconics · Dialog Wrapper Module Activex Control
Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control (DlgWrapper.dll) before 8.4.166.0, as used by ICONICS OPC Enabled Gauge, Switch, and Vessel ActiveX, allows remote attackers to execute arbitrary code via a long (1) FileName or (2) Filter argument.
Description
Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control (DlgWrapper.dll) before 8.4.166.0, as used by ICONICS OPC Enabled Gauge, Switch, and Vessel ActiveX, allows remote attackers to execute arbitrary code via a long (1) FileName or (2) Filter argument.
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| http://osvdb.org/32552 | |
| http://secunia.com/advisories/23583 | Vendor Advisory |
| http://www.kb.cert.org/vuls/id/251969 | Third Party AdvisoryUS Government Resource |
| http://www.securityfocus.com/bid/21849 | |
| http://www.vupen.com/english/advisories/2007/0025 | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/31228 | |
| http://osvdb.org/32552 | |
| http://secunia.com/advisories/23583 | Vendor Advisory |
| http://www.kb.cert.org/vuls/id/251969 | Third Party AdvisoryUS Government Resource |
| http://www.securityfocus.com/bid/21849 | |
| http://www.vupen.com/english/advisories/2007/0025 | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/31228 |
Track CVE-2006-6488 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Source: NIST National Vulnerability Database (record CVE-2006-6488), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
