CVE-2006-3376

2006-07-0620:05:00

mitre

web.nvd.nist.gov

cve-2006-3376

libwmf

integer overflow

player.c

remote code execution

nvd

security vulnerability

abiword

freetype

gimp

libgsf

imagemagick

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

High

EPSS

0.19

Percentile

96.3%

JSON

Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file.

Affected configurations

Nvd

Node

wvwarelibwmfMatch0.2.8_.4

wvwarewv2Match0.2.1

wvwarewv2Match0.2.2

wvwarewv2Match0.2.3

VendorProductVersionCPE
wvwarelibwmf0.2.8_.4cpe:2.3:a:wvware:libwmf:0.2.8_.4:*:*:*:*:*:*:*
wvwarewv20.2.1cpe:2.3:a:wvware:wv2:0.2.1:*:*:*:*:*:*:*
wvwarewv20.2.2cpe:2.3:a:wvware:wv2:0.2.2:*:*:*:*:*:*:*
wvwarewv20.2.3cpe:2.3:a:wvware:wv2:0.2.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wvware	libwmf	0.2.8_.4	cpe:2.3:a:wvware:libwmf:0.2.8_.4:::::::*
wvware	wv2	0.2.1	cpe:2.3:a:wvware:wv2:0.2.1:::::::*
wvware	wv2	0.2.2	cpe:2.3:a:wvware:wv2:0.2.2:::::::*
wvware	wv2	0.2.3	cpe:2.3:a:wvware:wv2:0.2.3:::::::*