CVE-2006-3376: Integer Overflow

Published Jul 6, 2006

Updated

Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file.

Affected Software

5 affected componentsFixes available

debian/libwmf

0.2.8.4-140.2.8.4-170.2.12-5.10.2.13-1

wvWare Wv2=0.2.3

wvWare Wv2=0.2.1

wvWare Libwmf=0.2.8_.4

wvWare Wv2=0.2.2

Event History

Jul 6, 2006

CVE Published

08:05 PM

Jul 7, 2006

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Aug 5, 2006

Data Sourced

09:33 AM

SeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2006-3376?

CVE-2006-3376 has a high severity rating due to the potential for remote code execution.

How do I fix CVE-2006-3376?

To fix CVE-2006-3376, upgrade to a patched version of libwmf, specifically any version later than 0.2.8.4-17.

Which software is affected by CVE-2006-3376?

CVE-2006-3376 affects multiple products including wv, abiword, freetype, gimp, libgsf, and imagemagick that use libwmf.

What type of attack is possible with CVE-2006-3376?

CVE-2006-3376 allows remote attackers to execute arbitrary code by exploiting the MaxRecordSize header field in a WMF file.

Is CVE-2006-3376 a common vulnerability?

Yes, CVE-2006-3376 is considered a common vulnerability as it affects widely used software and libraries.