CVE-2006-2458
published 2006-05-18CVE-2006-2458: Multiple heap-based buffer overflows in Libextractor 0.5.13 and earlier allow remote attackers to execute arbitrary code via (1) the asf_read_header function…
PriorityP334medium4CVSS 2.0
AVNACHAuNCPIPAN
EXPLOIT
EPSS
8.92%
94.7th percentile
Multiple heap-based buffer overflows in Libextractor 0.5.13 and earlier allow remote attackers to execute arbitrary code via (1) the asf_read_header function in the ASF plugin (plugins/asfextractor.c), and (2) the parse_trak_atom function in the QT plugin (plugins/qtextractor.c).
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | libextractor | < libextractor 0.5.14-1 (bookworm) | libextractor 0.5.14-1 (bookworm) |
| gnu | libextractor | >= 0 < 0.5.14-1 | 0.5.14-1 |
| gnu | libextractor | >= 0 < 0.5.14-1 | 0.5.14-1 |
| gnu | libextractor | >= 0 < 0.5.14-1 | 0.5.14-1 |
| gnu | libextractor | >= 0 < 0.5.14-1 | 0.5.14-1 |
| libextractor | libextractor | — | — |
CVSS provenance
nvdv2.04.0MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:N
osv4.0MEDIUM
vendor_debian4.0MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Libextractor multiple heap-based buffer overflows
ghsa·2022-05-01
CVE-2006-2458 [MEDIUM] Libextractor multiple heap-based buffer overflows
Libextractor multiple heap-based buffer overflows
Multiple heap-based buffer overflows in Libextractor 0.5.13 and earlier allow remote attackers to execute arbitrary code via (1) the asf_read_header function in the ASF plugin (plugins/asfextractor.c), and (2) the parse_trak_atom function in the QT plugin (plugins/qtextractor.c).
OSV
Libextractor multiple heap-based buffer overflows
osv·2022-05-01
CVE-2006-2458 [MEDIUM] Libextractor multiple heap-based buffer overflows
Libextractor multiple heap-based buffer overflows
Multiple heap-based buffer overflows in Libextractor 0.5.13 and earlier allow remote attackers to execute arbitrary code via (1) the asf_read_header function in the ASF plugin (plugins/asfextractor.c), and (2) the parse_trak_atom function in the QT plugin (plugins/qtextractor.c).
OSV
CVE-2006-2458: Multiple heap-based buffer overflows in Libextractor 0
osv·2006-05-18·CVSS 4.0
CVE-2006-2458 [MEDIUM] CVE-2006-2458: Multiple heap-based buffer overflows in Libextractor 0
Multiple heap-based buffer overflows in Libextractor 0.5.13 and earlier allow remote attackers to execute arbitrary code via (1) the asf_read_header function in the ASF plugin (plugins/asfextractor.c), and (2) the parse_trak_atom function in the QT plugin (plugins/qtextractor.c).
Debian
CVE-2006-2458: libextractor - Multiple heap-based buffer overflows in Libextractor 0.5.13 and earlier allow re...
vendor_debian·2006·CVSS 4.0
CVE-2006-2458 [MEDIUM] CVE-2006-2458: libextractor - Multiple heap-based buffer overflows in Libextractor 0.5.13 and earlier allow re...
Multiple heap-based buffer overflows in Libextractor 0.5.13 and earlier allow remote attackers to execute arbitrary code via (1) the asf_read_header function in the ASF plugin (plugins/asfextractor.c), and (2) the parse_trak_atom function in the QT plugin (plugins/qtextractor.c).
Scope: local
bookworm: resolved (fixed in 0.5.14-1)
bullseye: resolved (fixed in 0.5.14-1)
forky: resolved (fixed in 0.5.14-1)
sid: resolved (fixed in 0.5.14-1)
trixie: resolved (fixed in 0.5.14-1)
No detection rules found.
No writeups or analysis indexed.
http://gnunet.org/libextractor/http://secunia.com/advisories/20150http://secunia.com/advisories/20160http://secunia.com/advisories/20326http://secunia.com/advisories/20457http://securityreason.com/securityalert/916http://securitytracker.com/id?1016118http://www.debian.org/security/2006/dsa-1081http://www.gentoo.org/security/en/glsa/glsa-200605-14.xmlhttp://www.novell.com/linux/security/advisories/2006-06-02.htmlhttp://www.securityfocus.com/archive/1/434288/100/0/threadedhttp://www.securityfocus.com/bid/18021http://www.vupen.com/english/advisories/2006/1848https://exchange.xforce.ibmcloud.com/vulnerabilities/26531https://exchange.xforce.ibmcloud.com/vulnerabilities/26532http://gnunet.org/libextractor/http://secunia.com/advisories/20150http://secunia.com/advisories/20160http://secunia.com/advisories/20326http://secunia.com/advisories/20457http://securityreason.com/securityalert/916http://securitytracker.com/id?1016118http://www.debian.org/security/2006/dsa-1081http://www.gentoo.org/security/en/glsa/glsa-200605-14.xmlhttp://www.novell.com/linux/security/advisories/2006-06-02.htmlhttp://www.securityfocus.com/archive/1/434288/100/0/threadedhttp://www.securityfocus.com/bid/18021http://www.vupen.com/english/advisories/2006/1848https://exchange.xforce.ibmcloud.com/vulnerabilities/26531https://exchange.xforce.ibmcloud.com/vulnerabilities/26532
2006-05-18
Published