CVE-2006-2362 - Vulnerability Details - OpenCVE

Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a file with a crafted Tektronix Hex Format (TekHex) record in which the length character is not a valid hexadecimal character.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Gnu	Binutils

Configuration 1 [-]

cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html
http://secunia.com/advisories/20188
http://secunia.com/advisories/20531
http://secunia.com/advisories/20550
http://secunia.com/advisories/22932
http://secunia.com/advisories/27441
http://sourceware.org/bugzilla/show_bug.cgi?id=2584
http://www.mail-archive.com/bug-binutils%40gnu.org/msg01516.html
http://www.novell.com/linux/security/advisories/2006_26_sr.html
http://www.securityfocus.com/bid/17950
http://www.securitytracker.com/id?1018872
http://www.trustix.org/errata/2006/0034/
http://www.ubuntu.com/usn/usn-292-1
http://www.vupen.com/english/advisories/2006/1924
http://www.vupen.com/english/advisories/2007/3665
https://exchange.xforce.ibmcloud.com/vulnerabilities/26644

History

Thu, 16 Jan 2025 20:15:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-05-15T16:00:00

Updated: 2025-01-16T20:05:47.171Z

Reserved: 2006-05-15T00:00:00

Link: CVE-2006-2362

Vulnrichment

Updated: 2024-08-07T17:51:04.067Z

NVD

Status : Deferred

Published: 2006-05-15T16:06:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2006-2362

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-04-18T00:00:00", "descriptions": [{"lang": "en", "value": "Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a file with a crafted Tektronix Hex Format (TekHex) record in which the length character is not a valid hexadecimal character."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-19T15:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20188", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20188"}, {"name": "20550", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20550"}, {"name": "22932", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/22932"}, {"name": "27441", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/27441"}, {"name": "2006-0034", "tags": ["vendor-advisory", "x_refsource_TRUSTIX"], "url": "http://www.trustix.org/errata/2006/0034/"}, {"name": "17950", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/17950"}, {"name": "[bug-binutils] 20060418 [Bug binutils/2584] New: SIGSEGV in strings tool when the file is crafted.", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.mail-archive.com/bug-binutils%40gnu.org/msg01516.html"}, {"name": "ADV-2007-3665", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/3665"}, {"name": "SUSE-SR:2006:026", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://www.novell.com/linux/security/advisories/2006_26_sr.html"}, {"name": "ADV-2006-1924", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/1924"}, {"name": "1018872", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1018872"}, {"name": "20531", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20531"}, {"name": "USN-292-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU"], "url": "http://www.ubuntu.com/usn/usn-292-1"}, {"name": "APPLE-SA-2007-10-30", "tags": ["vendor-advisory", "x_refsource_APPLE"], "url": "http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html"}, {"name": "binutils-libbfd-bo(26644)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26644"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://sourceware.org/bugzilla/show_bug.cgi?id=2584"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-2362", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a file with a crafted Tektronix Hex Format (TekHex) record in which the length character is not a valid hexadecimal character."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20188", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20188"}, {"name": "20550", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20550"}, {"name": "22932", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/22932"}, {"name": "27441", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/27441"}, {"name": "2006-0034", "refsource": "TRUSTIX", "url": "http://www.trustix.org/errata/2006/0034/"}, {"name": "17950", "refsource": "BID", "url": "http://www.securityfocus.com/bid/17950"}, {"name": "[bug-binutils] 20060418 [Bug binutils/2584] New: SIGSEGV in strings tool when the file is crafted.", "refsource": "MLIST", "url": "http://www.mail-archive.com/bug-binutils@gnu.org/msg01516.html"}, {"name": "ADV-2007-3665", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/3665"}, {"name": "SUSE-SR:2006:026", "refsource": "SUSE", "url": "http://www.novell.com/linux/security/advisories/2006_26_sr.html"}, {"name": "ADV-2006-1924", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/1924"}, {"name": "1018872", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1018872"}, {"name": "20531", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20531"}, {"name": "USN-292-1", "refsource": "UBUNTU", "url": "http://www.ubuntu.com/usn/usn-292-1"}, {"name": "APPLE-SA-2007-10-30", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html"}, {"name": "binutils-libbfd-bo(26644)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26644"}, {"name": "http://sourceware.org/bugzilla/show_bug.cgi?id=2584", "refsource": "CONFIRM", "url": "http://sourceware.org/bugzilla/show_bug.cgi?id=2584"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T17:51:04.067Z"}, "title": "CVE Program Container", "references": [{"name": "20188", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20188"}, {"name": "20550", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20550"}, {"name": "22932", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/22932"}, {"name": "27441", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/27441"}, {"name": "2006-0034", "tags": ["vendor-advisory", "x_refsource_TRUSTIX", "x_transferred"], "url": "http://www.trustix.org/errata/2006/0034/"}, {"name": "17950", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/17950"}, {"name": "[bug-binutils] 20060418 [Bug binutils/2584] New: SIGSEGV in strings tool when the file is crafted.", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.mail-archive.com/bug-binutils%40gnu.org/msg01516.html"}, {"name": "ADV-2007-3665", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/3665"}, {"name": "SUSE-SR:2006:026", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://www.novell.com/linux/security/advisories/2006_26_sr.html"}, {"name": "ADV-2006-1924", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/1924"}, {"name": "1018872", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1018872"}, {"name": "20531", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20531"}, {"name": "USN-292-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"], "url": "http://www.ubuntu.com/usn/usn-292-1"}, {"name": "APPLE-SA-2007-10-30", "tags": ["vendor-advisory", "x_refsource_APPLE", "x_transferred"], "url": "http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html"}, {"name": "binutils-libbfd-bo(26644)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26644"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://sourceware.org/bugzilla/show_bug.cgi?id=2584"}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-787", "lang": "en", "description": "CWE-787 Out-of-bounds Write"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-01-16T20:05:43.320995Z", "id": "CVE-2006-2362", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-16T20:05:47.171Z"}}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-2362", "datePublished": "2006-05-15T16:00:00", "dateReserved": "2006-05-15T00:00:00", "dateUpdated": "2025-01-16T20:05:47.171Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://secunia.com/advisories/20188", "name": "20188", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"]}, {"url": "http://secunia.com/advisories/20550", "name": "20550", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"]}, {"url": "http://secunia.com/advisories/22932", "name": "22932", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"]}, {"url": "http://secunia.com/advisories/27441", "name": "27441", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"]}, {"url": "http://www.trustix.org/errata/2006/0034/", "name": "2006-0034", "tags": ["vendor-advisory", "x_refsource_TRUSTIX", "x_transferred"]}, {"url": "http://www.securityfocus.com/bid/17950", "name": "17950", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"]}, {"url": "http://www.mail-archive.com/bug-binutils%40gnu.org/msg01516.html", "name": "[bug-binutils] 20060418 [Bug binutils/2584] New: SIGSEGV in strings tool when the file is crafted.", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"]}, {"url": "http://www.vupen.com/english/advisories/2007/3665", "name": "ADV-2007-3665", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"]}, {"url": "http://www.novell.com/linux/security/advisories/2006_26_sr.html", "name": "SUSE-SR:2006:026", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"]}, {"url": "http://www.vupen.com/english/advisories/2006/1924", "name": "ADV-2006-1924", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"]}, {"url": "http://www.securitytracker.com/id?1018872", "name": "1018872", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"]}, {"url": "http://secunia.com/advisories/20531", "name": "20531", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"]}, {"url": "http://www.ubuntu.com/usn/usn-292-1", "name": "USN-292-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"]}, {"url": "http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html", "name": "APPLE-SA-2007-10-30", "tags": ["vendor-advisory", "x_refsource_APPLE", "x_transferred"]}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26644", "name": "binutils-libbfd-bo(26644)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"]}, {"url": "http://sourceware.org/bugzilla/show_bug.cgi?id=2584", "tags": ["x_refsource_CONFIRM", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T17:51:04.067Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2006-2362", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-01-16T20:05:43.320995Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "CWE-787 Out-of-bounds Write"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-16T20:04:43.491Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-04-18T00:00:00", "references": [{"url": "http://secunia.com/advisories/20188", "name": "20188", "tags": ["third-party-advisory", "x_refsource_SECUNIA"]}, {"url": "http://secunia.com/advisories/20550", "name": "20550", "tags": ["third-party-advisory", "x_refsource_SECUNIA"]}, {"url": "http://secunia.com/advisories/22932", "name": "22932", "tags": ["third-party-advisory", "x_refsource_SECUNIA"]}, {"url": "http://secunia.com/advisories/27441", "name": "27441", "tags": ["third-party-advisory", "x_refsource_SECUNIA"]}, {"url": "http://www.trustix.org/errata/2006/0034/", "name": "2006-0034", "tags": ["vendor-advisory", "x_refsource_TRUSTIX"]}, {"url": "http://www.securityfocus.com/bid/17950", "name": "17950", "tags": ["vdb-entry", "x_refsource_BID"]}, {"url": "http://www.mail-archive.com/bug-binutils%40gnu.org/msg01516.html", "name": "[bug-binutils] 20060418 [Bug binutils/2584] New: SIGSEGV in strings tool when the file is crafted.", "tags": ["mailing-list", "x_refsource_MLIST"]}, {"url": "http://www.vupen.com/english/advisories/2007/3665", "name": "ADV-2007-3665", "tags": ["vdb-entry", "x_refsource_VUPEN"]}, {"url": "http://www.novell.com/linux/security/advisories/2006_26_sr.html", "name": "SUSE-SR:2006:026", "tags": ["vendor-advisory", "x_refsource_SUSE"]}, {"url": "http://www.vupen.com/english/advisories/2006/1924", "name": "ADV-2006-1924", "tags": ["vdb-entry", "x_refsource_VUPEN"]}, {"url": "http://www.securitytracker.com/id?1018872", "name": "1018872", "tags": ["vdb-entry", "x_refsource_SECTRACK"]}, {"url": "http://secunia.com/advisories/20531", "name": "20531", "tags": ["third-party-advisory", "x_refsource_SECUNIA"]}, {"url": "http://www.ubuntu.com/usn/usn-292-1", "name": "USN-292-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU"]}, {"url": "http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html", "name": "APPLE-SA-2007-10-30", "tags": ["vendor-advisory", "x_refsource_APPLE"]}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26644", "name": "binutils-libbfd-bo(26644)", "tags": ["vdb-entry", "x_refsource_XF"]}, {"url": "http://sourceware.org/bugzilla/show_bug.cgi?id=2584", "tags": ["x_refsource_CONFIRM"]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a file with a crafted Tektronix Hex Format (TekHex) record in which the length character is not a valid hexadecimal character."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2017-07-19T15:57:01"}, "x_legacyV4Record": {"affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"version": {"version_data": [{"version_value": "n/a"}]}, "product_name": "n/a"}]}, "vendor_name": "n/a"}]}}, "data_type": "CVE", "references": {"reference_data": [{"url": "http://secunia.com/advisories/20188", "name": "20188", "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/20550", "name": "20550", "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/22932", "name": "22932", "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/27441", "name": "27441", "refsource": "SECUNIA"}, {"url": "http://www.trustix.org/errata/2006/0034/", "name": "2006-0034", "refsource": "TRUSTIX"}, {"url": "http://www.securityfocus.com/bid/17950", "name": "17950", "refsource": "BID"}, {"url": "http://www.mail-archive.com/bug-binutils@gnu.org/msg01516.html", "name": "[bug-binutils] 20060418 [Bug binutils/2584] New: SIGSEGV in strings tool when the file is crafted.", "refsource": "MLIST"}, {"url": "http://www.vupen.com/english/advisories/2007/3665", "name": "ADV-2007-3665", "refsource": "VUPEN"}, {"url": "http://www.novell.com/linux/security/advisories/2006_26_sr.html", "name": "SUSE-SR:2006:026", "refsource": "SUSE"}, {"url": "http://www.vupen.com/english/advisories/2006/1924", "name": "ADV-2006-1924", "refsource": "VUPEN"}, {"url": "http://www.securitytracker.com/id?1018872", "name": "1018872", "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/20531", "name": "20531", "refsource": "SECUNIA"}, {"url": "http://www.ubuntu.com/usn/usn-292-1", "name": "USN-292-1", "refsource": "UBUNTU"}, {"url": "http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html", "name": "APPLE-SA-2007-10-30", "refsource": "APPLE"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26644", "name": "binutils-libbfd-bo(26644)", "refsource": "XF"}, {"url": "http://sourceware.org/bugzilla/show_bug.cgi?id=2584", "name": "http://sourceware.org/bugzilla/show_bug.cgi?id=2584", "refsource": "CONFIRM"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "eng", "value": "Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a file with a crafted Tektronix Hex Format (TekHex) record in which the length character is not a valid hexadecimal character."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-2362", "STATE": "PUBLIC", "ASSIGNER": "cve@mitre.org"}}}}, "cveMetadata": {"cveId": "CVE-2006-2362", "state": "PUBLISHED", "dateUpdated": "2025-01-16T20:05:47.171Z", "dateReserved": "2006-05-15T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2006-05-15T16:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*", "matchCriteriaId": "133521B0-6212-48E3-B114-216F626E1D23", "versionEndExcluding": "2.17", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a file with a crafted Tektronix Hex Format (TekHex) record in which the length character is not a valid hexadecimal character."}], "id": "CVE-2006-2362", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": true, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.4, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2006-05-15T16:06:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/20188"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/20531"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/20550"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/22932"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/27441"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "url": "http://sourceware.org/bugzilla/show_bug.cgi?id=2584"}, {"source": "cve@mitre.org", "tags": ["Issue Tracking", "Mailing List"], "url": "http://www.mail-archive.com/bug-binutils%40gnu.org/msg01516.html"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://www.novell.com/linux/security/advisories/2006_26_sr.html"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Patch", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/17950"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id?1018872"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://www.trustix.org/errata/2006/0034/"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://www.ubuntu.com/usn/usn-292-1"}, {"source": "cve@mitre.org", "tags": ["Permissions Required"], "url": "http://www.vupen.com/english/advisories/2006/1924"}, {"source": "cve@mitre.org", "tags": ["Permissions Required"], "url": "http://www.vupen.com/english/advisories/2007/3665"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26644"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/20188"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/20531"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/20550"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/22932"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://secunia.com/advisories/27441"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "url": "http://sourceware.org/bugzilla/show_bug.cgi?id=2584"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Mailing List"], "url": "http://www.mail-archive.com/bug-binutils%40gnu.org/msg01516.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.novell.com/linux/security/advisories/2006_26_sr.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Patch", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/17950"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id?1018872"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://www.trustix.org/errata/2006/0034/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://www.ubuntu.com/usn/usn-292-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Permissions Required"], "url": "http://www.vupen.com/english/advisories/2006/1924"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Permissions Required"], "url": "http://www.vupen.com/english/advisories/2007/3665"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26644"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-787"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}