CVE-2006-2362

moderate-risk
Published 2006-05-15

Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a file with a crafted Tektronix Hex Format (TekHex) record in which the length character is not a valid hexadecimal character.

Do I need to act?

~
5.5% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
!
1 public exploit available
27856
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.3/10 High
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Gnu

References (32)

Mailing List http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html
Third Party Advisory http://secunia.com/advisories/20188
Third Party Advisory http://secunia.com/advisories/20531
Third Party Advisory http://secunia.com/advisories/20550
Third Party Advisory http://secunia.com/advisories/22932
Third Party Advisory http://secunia.com/advisories/27441
Exploit http://sourceware.org/bugzilla/show_bug.cgi?id=2584
Issue Tracking http://www.mail-archive.com/bug-binutils%40gnu.org/msg01516.html
Third Party Advisory http://www.novell.com/linux/security/advisories/2006_26_sr.html
Exploit http://www.securityfocus.com/bid/17950
Third Party Advisory http://www.securitytracker.com/id?1018872
Broken Link http://www.trustix.org/errata/2006/0034/
Broken Link http://www.ubuntu.com/usn/usn-292-1
Permissions Required http://www.vupen.com/english/advisories/2006/1924
Permissions Required http://www.vupen.com/english/advisories/2007/3665
Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/26644
Mailing List http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html
Third Party Advisory http://secunia.com/advisories/20188
Third Party Advisory http://secunia.com/advisories/20531
Third Party Advisory http://secunia.com/advisories/20550
and 12 more references
46
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 15/34 · Moderate
Exposure 5/34 · Minimal