NVD

Id
63148  
Name
CVE-2006-4514  
Description
Heap-based buffer overflow in the ole_info_read_metabat function in Gnome Structured File library (libgsf) 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a large num_metabat value in an OLE document, which causes the ole_init_info function to allocate insufficient memory.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-11-30  
Modified Date
2013-05-29  
Seq
2006-4514  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
328853 63148 CVE-2006-4514 20070101-01-P  View
328854 63148 CVE-2006-4514 20061130 Multiple Vendor libgsf Heap Overflow Vulnerability  View
328855 63148 CVE-2006-4514 SUSE-SA:2006:076  View
328856 63148 CVE-2006-4514 oval:org.mitre.oval:def:9413  View
328857 63148 CVE-2006-4514 RHSA-2007:0011  View
328858 63148 CVE-2006-4514 GLSA-200612-13  View
328859 63148 CVE-2006-4514 DSA-1221  View
328860 63148 CVE-2006-4514 MDKSA-2006:220  View
328861 63148 CVE-2006-4514 20061214 rPSA-2006-0232-1 libgsf  View
328862 63148 CVE-2006-4514 21358  View
328863 63148 CVE-2006-4514 USN-391-1  View
328864 63148 CVE-2006-4514 ADV-2006-4784  View
328865 63148 CVE-2006-4514 http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf  View
328866 63148 CVE-2006-4514 libgsf-metabat-bo(30611)  View
328867 63148 CVE-2006-4514 https://issues.rpath.com/browse/RPL-857  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58608 JVNDB-2006-000804 libgsf の ole_init_info() 関数におけるヒープオーバーフローの脆弱性 GNOME Structured File Library (libgsf) には、ole_init_info() 関数において OLE ドキュメントに含まれる num_metabat 値に対するチェックに不備が存在するため、過度に大きな num_metabat 値を処理した場合にヒープオーバーフローが発生する脆弱性が存在します。 CVE-2006-4514 20616 CVE-2006-4514 63148 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000804.html 2006-11-30 2013-06-04 View