CVE-2006-4346 — Asterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the Record function, which allows remote attackers to (1) execute code via format string specifiers or (2) ove — CVE Database · The Intelligence Room