Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2006-3376HistoryJul 06, 2006 - 8:05 p.m.
CVE-2006-3376
2006-07-0620:05:00
Debian Security Bug Tracker
security-tracker.debian.org
29
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.19
Percentile
96.3%
Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libwmf | < 0.2.8.4-2 | libwmf_0.2.8.4-2_all.deb |
| Debian | 11 | all | libwmf | < 0.2.8.4-2 | libwmf_0.2.8.4-2_all.deb |
| Debian | 999 | all | libwmf | < 0.2.8.4-2 | libwmf_0.2.8.4-2_all.deb |
| Debian | 13 | all | libwmf | < 0.2.8.4-2 | libwmf_0.2.8.4-2_all.deb |
Related
nessus
nessus
Fedora Core 5 : libwmf-0.2.8.4-5.1 (2006-805)
2007-01-17 00:00:00
Fedora Core 4 : libwmf-0.2.8.3-8.1 (2006-804)
2007-01-17 00:00:00
Fedora Core 5 : libwmf-0.2.8.4-5.2 (2006-831)
2007-01-17 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200608-17 (libwmf)
2008-09-24 00:00:00
Debian Security Advisory DSA 1194-1 (libwmf)
2008-01-17 00:00:00
FreeBSD Ports: libwmf
2009-05-20 00:00:00
centos
centos
libwmf security update
2006-07-18 12:30:58
cvelist
cvelist
CVE-2006-3376
2006-07-06 20:00:00
nvd
nvd
CVE-2006-3376
2006-07-06 20:05:00
gentoo
gentoo
libwmf: Buffer overflow vulnerability
2006-08-10 00:00:00
ubuntu
ubuntu
libwmf vulnerability
2006-08-09 00:00:00
cve
cve
CVE-2006-3376
2006-07-06 20:05:00
freebsd
freebsd
libwmf -- integer overflow vulnerability
2006-07-03 00:00:00
redhat
redhat
(RHSA-2006:0597) libwmf security update
2006-07-18 00:00:00
debian
debian
[SECURITY] [DSA 1194-1] New libwmf packages fix arbitrary code execution
2006-10-09 19:43:45
osv
osv
libwmf
2006-10-09 00:00:00
ubuntucve
ubuntucve
CVE-2006-3376
2006-07-06 00:00:00
archlinux
archlinux
[ASA-201701-1] libwmf: multiple issues
2017-01-01 00:00:00
slackware
slackware
[slackware-security] libwmf
2018-05-01 01:19:49
kitploit
kitploit
arch-audit - An utility like pkg-audit for Arch Linux
2016-10-15 14:30:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
0.19
Percentile
96.3%
Related for DEBIANCVE:CVE-2006-3376