CVE-2006-4514
- State
- Published
- Severity
- Not scored
- Published
- Nov 30, 2006
- Updated
- Aug 7, 2024
- Reserved
- Aug 31, 2006
Description
Heap-based buffer overflow in the ole_info_read_metabat function in Gnome Structured File library (libgsf) 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a large num_metabat value in an OLE document, which causes the ole_init_info function to allocate insufficient memory.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://issues.rpath.com/browse/RPL-857
- RHSA-2007:0011vendor-advisory
- 23167third-party-advisory
- 23920third-party-advisory
- 23352third-party-advisory
- GLSA-200612-13vendor-advisory
- USN-391-1vendor-advisory
- 23227third-party-advisory
- 21358vdb-entry
- MDKSA-2006:220vendor-advisory
- 20061130 Multiple Vendor libgsf Heap Overflow Vulnerabilitythird-party-advisory
- libgsf-metabat-bo(30611)vdb-entry
- ADV-2006-4784vdb-entry
- SUSE-SA:2006:076vendor-advisory
- 20061214 rPSA-2006-0232-1 libgsfmailing-list
- 23166third-party-advisory
- 23337third-party-advisory
- oval:org.mitre.oval:def:9413vdb-entrysignature
- 23355third-party-advisory
- DSA-1221vendor-advisory
- 23164third-party-advisory
- 23686third-party-advisory
- http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.