CVE-2006-3893: Casio Photo Loader

High severity, CVSS 10.0. EPSS: 6.6% chance of exploitation in the next 30 days.

Multiple buffer overflows in the ActiveX controls in Newtone ImageKit 5 before Fix 30 and 6 before Fix 40, as used in CASIO Photo Loader software before 3.01 and possibly other software, allow remote attackers to execute arbitrary code via a crafted HTML document.

Affected products

• Casio Photo Loader: version 3.00 only
• Newtone Imagekit: version 5_fix_29 only; version 6_fix_40 only

Published 2006-12-04. Last modified 2026-06-16.