National Cyber Awareness System

Vulnerability Summary for CVE-2006-3376

Overview

Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file.

Impact

CVSS Severity (version 2.0 upgrade from v1.0):

CVSS Version 2 Metrics:

Vendor Statements (disclaimer)

Official Statement from Red Hat (03/14/2007)

Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: VUPEN

Name: ADV-2006-2646

Hyperlink:http://www.vupen.com/english/advisories/2006/2646

External Source: BID

Name: 18751

Hyperlink:http://www.securityfocus.com/bid/18751

External Source: BUGTRAQ

Name: 20060630 libwmf integer/heap overflow

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/438803/100/0/threaded

External Source: SECUNIA

Name: 20921

Type: Advisory

Hyperlink:http://secunia.com/advisories/20921

External Source: OVAL

Name: oval:org.mitre.oval:def:10262

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10262

External Source: XF

Name: libwmf-wmf-bo(27516)

Hyperlink:http://xforce.iss.net/xforce/xfdb/27516

External Source: UBUNTU

Name: USN-333-1

Hyperlink:http://www.ubuntu.com/usn/usn-333-1

External Source: SUSE

Name: SUSE-SR:2006:019

Hyperlink:http://www.novell.com/linux/security/advisories/2006_19_sr.html

External Source: MANDRIVA

Name: MDKSA-2006:132

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:132

External Source: SECTRACK

Name: 1016518

Hyperlink:http://securitytracker.com/id?1016518

External Source: SREASON

Name: 1190

Hyperlink:http://securityreason.com/securityalert/1190

External Source: GENTOO

Name: GLSA-200608-17

Hyperlink:http://security.gentoo.org/glsa/glsa-200608-17.xml

External Source: SECUNIA

Name: 22311

Hyperlink:http://secunia.com/advisories/22311

External Source: SECUNIA

Name: 21473

Hyperlink:http://secunia.com/advisories/21473

External Source: SECUNIA

Name: 21459

Hyperlink:http://secunia.com/advisories/21459

External Source: SECUNIA

Name: 21419

Hyperlink:http://secunia.com/advisories/21419

External Source: SECUNIA

Name: 21261

Hyperlink:http://secunia.com/advisories/21261

External Source: SECUNIA

Name: 21064

Hyperlink:http://secunia.com/advisories/21064

External Source: REDHAT

Name: RHSA-2006:0597

Hyperlink:http://rhn.redhat.com/errata/RHSA-2006-0597.html

External Source: DEBIAN

Name: DSA-1194

Hyperlink:http://lists.debian.org/debian-security-announce/debian-security-announce-2006/msg00289.html

References to Check Content

Identifier:oval:org.mitre.oval:def:10262

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:10262