CVE-2006-4514

Published: Nov 30, 2006Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in the ole_info_read_metabat function in Gnome Structured File library (libgsf) 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a large num_metabat value in an OLE document, which causes the ole_init_info function to allocate insufficient memory.

Affected (4)

Products: Libgsf: Libgsf

Libgsf

1 product

Libgsf

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Libgsf Libgsf	Version 1.11.1
Libgsf Libgsf	Version 1.13.2
Libgsf Libgsf	Version 1.14.1
Libgsf Libgsf	Version 1.14

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (48)

ftp://patches.sgi.com/support/free/security/advisories/20070101-01-P.asc (unsafe URL)

Source: cve@mitre.org

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=446

Source: cve@mitre.org

Vendor Advisory

http://lists.suse.com/archive/suse-security-announce/2006-Dec/0005.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2007-0011.html

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/23164

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/23166

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/23167

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/23227

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/23337

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/23352

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/23355

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/23686

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/23920

Source: cve@mitre.org

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200612-13.xml

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1221

Source: cve@mitre.org

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2006:220

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/454389/30/9210/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/21358

Source: cve@mitre.org

Patch

http://www.ubuntu.com/usn/usn-391-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/4784

Source: cve@mitre.org

Vendor Advisory

http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/30611

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-857

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9413

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20070101-01-P.asc (unsafe URL)