CVE-2006-4146

Published: Aug 31, 2006Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in GNU Debugger (GDB) 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block (DW_FORM_block) that contains a large number of operations.

Affected (1)

Products: Gnu: Gdb

Gnu

1 product

Gdb

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Gdb	Version 6.5

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (52)

ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc (unsafe URL)

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=304669

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2006/Oct/msg00000.html

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html

Source: cve@mitre.org

http://secunia.com/advisories/21713

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/22205

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/22662

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25098

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25632

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25894

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25934

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26909

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27706

Source: cve@mitre.org

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200711-23.xml

Source: cve@mitre.org

http://securitytracker.com/id?1017138

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2007-253.htm

Source: cve@mitre.org

http://www.osvdb.org/28318

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0229.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0469.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/19802

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-356-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3433

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/4283

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/3229

Source: cve@mitre.org

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204841

Source: cve@mitre.org

Patch

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10463

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc (unsafe URL)