CVE-2006-4221: IBM Egatherer

High severity, CVSS 9.3. EPSS: 8.9% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter to the RunEgatherer method.

Affected products

• IBM Egatherer: version 2.0.16 only; version 2.42.243 only

Published 2006-08-18. Last modified 2026-06-16.