CVE-2006-3376
CVE-2006-3376
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file.
EPSS 7,7% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
libwmf Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.2.8.4-2
Actualiza a 0.2.8.4-2
libwmf Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.2.8.4-2
Actualiza a 0.2.8.4-2
libwmf Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.2.8.4-2
Actualiza a 0.2.8.4-2
Fuentes originales
- http://www.securityfocus.com/archive/1/438803/100/0/threaded
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10262
- http://secunia.com/advisories/20921
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27516
- http://securitytracker.com/id?1016518
- http://secunia.com/advisories/21473
- http://secunia.com/advisories/22311
- http://www.ubuntu.com/usn/usn-333-1
- http://securityreason.com/securityalert/1190
- http://secunia.com/advisories/21459
- http://www.securityfocus.com/bid/18751
- http://www.novell.com/linux/security/advisories/2006_19_sr.html
- http://secunia.com/advisories/21064
- http://www.vupen.com/english/advisories/2006/2646
- https://www.debian.org/security/2006/dsa-1194
- http://secunia.com/advisories/21261
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:132
- http://secunia.com/advisories/21419
- http://rhn.redhat.com/errata/RHSA-2006-0597.html
- http://security.gentoo.org/glsa/glsa-200608-17.xml
- https://nvd.nist.gov/vuln/detail/CVE-2006-3376