CVE-2006-1900

CVE-2006-1900 describes multiple buffer overflow vulnerabilities in W3C Amaya 9.4 and earlier versions, allowing remote attackers to execute arbitrary code. Specifically, long values in the COMPACT, ROWS, and COLOR attributes of COLGROUP, TEXTAREA, and LEGEND HTML elements, respectively, can trigger these overflows. With a CVSS score of 7.6, this vulnerability is considered highly severe due to its network-based attack vector, high impact on confidentiality, integrity, and availability, despite a high access complexity. While not listed in CISA's KEV catalog, exploit code for some of these overflows is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.