{"id":"CVE-2006-1176","aliases":["EUVD-2006-1180","GHSA-c3xg-4qmh-r995"],"status":"published","title":"Buffer overflow in eBay Enhanced Picture Services (aka EPUImageControl Class) in EUPWALcontrol...","description":"Buffer overflow in eBay Enhanced Picture Services (aka EPUImageControl Class) in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item (SYI), Setup \u0026 Test eBay Enhanced Picture Services, Picture Manager Enhanced Uploader, and CARad.com Add Vehicle, allows remote attackers to execute arbitrary code via a crafted HTML document.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04583,"percentile":0.91695,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2006-07-08T00:00:00Z","modified":"2026-06-16T22:22:10Z","products":[{"vendor":"ebay","product":"enhanced_picture_services"}],"references":[{"url":"http://secunia.com/advisories/20969","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://securitytracker.com/id?1016445","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.kb.cert.org/vuls/id/597721","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/18921","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2006/2698","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27631","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.kb.cert.org/vuls/id/MIMG-6QKPVH","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-1176"},{"url":"https://github.com/advisories/GHSA-c3xg-4qmh-r995"}],"sources":{"cve":[{"id":"CVE-2006-1176","description":"Buffer overflow in eBay Enhanced Picture Services (aka EPUImageControl Class) in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item (SYI), Setup \u0026 Test eBay Enhanced Picture Services, Picture Manager Enhanced Uploader, and CARad.com Add Vehicle, allows remote attackers to execute arbitrary code via a crafted HTML document.","status":"published","published":"2006-07-08T00:00:00Z","modified":"2024-08-07T17:03:28.323Z","updated_at":"2026-11-02T14:33:51.835276Z"}],"euvd":[{"id":"EUVD-2006-1180","description":"Buffer overflow in eBay Enhanced Picture Services (aka EPUImageControl Class) in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item (SYI), Setup \u0026 Test eBay Enhanced Picture Services, Picture Manager Enhanced Uploader, and CARad.com Add Vehicle, allows remote attackers to execute arbitrary code via a crafted HTML document.","status":"published","published":"2006-07-08T00:00:00Z","modified":"2024-08-07T17:03:28Z","updated_at":"2026-11-03T01:16:06.330396Z"}],"ghsa":[{"id":"GHSA-c3xg-4qmh-r995","title":"Buffer overflow in eBay Enhanced Picture Services (aka EPUImageControl Class) in EUPWALcontrol...","description":"Buffer overflow in eBay Enhanced Picture Services (aka EPUImageControl Class) in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item (SYI), Setup \u0026 Test eBay Enhanced Picture Services, Picture Manager Enhanced Uploader, and CARad.com Add Vehicle, allows remote attackers to execute arbitrary code via a crafted HTML document.","status":"published","published":"2022-05-01T06:46:46Z","modified":"2023-01-31T05:00:49Z","updated_at":"2026-11-02T14:47:56.116667Z"}],"nvd":[{"id":"CVE-2006-1176","description":"Buffer overflow in eBay Enhanced Picture Services (aka EPUImageControl Class) in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item (SYI), Setup \u0026 Test eBay Enhanced Picture Services, Picture Manager Enhanced Uploader, and CARad.com Add Vehicle, allows remote attackers to execute arbitrary code via a crafted HTML document.","status":"published","published":"2006-07-08T00:05:00Z","modified":"2026-06-16T22:22:10.03Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:04.288594Z"}]}}