CVE-2006-3376

Published: Jul 6, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file.

Affected (4)

Products: Wvware: Libwmf, Wv2

2 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Wvware Libwmf	Version 0.2.8_.4
Wvware Wv2	Version 0.2.1
Wvware Wv2	Version 0.2.2
Wvware Wv2	Version 0.2.3

References (40)

http://rhn.redhat.com/errata/RHSA-2006-0597.html

Source: cve@mitre.org

http://secunia.com/advisories/20921

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/21064

Source: cve@mitre.org

http://secunia.com/advisories/21261

Source: cve@mitre.org

http://secunia.com/advisories/21419

Source: cve@mitre.org

http://secunia.com/advisories/21459

Source: cve@mitre.org

http://secunia.com/advisories/21473

Source: cve@mitre.org

http://secunia.com/advisories/22311

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200608-17.xml

Source: cve@mitre.org

http://securityreason.com/securityalert/1190

Source: cve@mitre.org

http://securitytracker.com/id?1016518

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:132

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2006_19_sr.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/438803/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/18751

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-333-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2646

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27516

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10262

Source: cve@mitre.org

https://www.debian.org/security/2006/dsa-1194

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2006-0597.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/20921

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/21064

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21261

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21419

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21459

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/21473

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22311

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200608-17.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/1190

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1016518

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:132

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2006_19_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/438803/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/18751

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-333-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/2646

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/27516

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10262

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.debian.org/security/2006/dsa-1194

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.