Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2006-3931

21
FAUCET Score

CVE-2006-3931 describes a buffer overflow vulnerability in the daemon function of Tuomas Airaksinen Midirecord 2.0. This flaw allows local users to execute arbitrary code by providing an overly long filename as a command-line argument. The vulnerability has a CVSS score of 4.6, indicating low severity with local access, low attack complexity, and partial impact on confidentiality, integrity, and availability, though its exploitability depends on Midirecord being setuid. While not actively exploited in the wild and absent from the KEV catalog, public exploit code exists via ExploitDB, but there is no evidence of active community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
2.0CPE matchmatch criteria
cpe:2.3:a:tuomas_airaksinen:midirecord:2.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

4.6MEDIUM

AV:L/AC:L/Au:N/C:P/I:P/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Exploitability Score
3.9
Impact Score
6.4
CvssVersion
2.0

Exploit Intelligence

EPSS Score
1.05%
Probability of exploitation in next 30 days
EPSS Percentile
60.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
ExploitDB: EDB-28288 · Jul 27, 2006
This CVE's current EPSS score of 0.0105 is in the 91st percentile among its peer group of 3,052 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

advisories.echo.or.id / adv/adv41-theday-2006.txt
ExploitVendor Advisory
securityreason.com / securityalert/1303
exchange.xforce.ibmcloud.com / vulnerabilities/28047
securityfocus.com / archive/1/441204/100/0/threaded
securityfocus.com / bid/19190
Exploit