Back to search
CVE-2006-4810
Published: Nov 8, 2006
Modified: Aug 7, 2024
PUBLISHED
Description
Buffer overflow in the readline function in util/texindex.c, as used by the (1) texi2dvi and (2) texindex commands, in texinfo 4.8 and earlier allows local users to execute arbitrary code via a crafted Texinfo file.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
22725
third-party-advisory
x_refsource_SECUNIA
MDKSA-2006:203
vendor-advisory
x_refsource_MANDRIVA
RHSA-2006:0727
vendor-advisory
x_refsource_REDHAT
22777
third-party-advisory
x_refsource_SECUNIA
USN-379-1
vendor-advisory
x_refsource_UBUNTU
20959
vdb-entry
x_refsource_BID
22995
third-party-advisory
x_refsource_SECUNIA
ADV-2006-4412
vdb-entry
x_refsource_VUPEN
20070404 VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates
mailing-list
x_refsource_BUGTRAQ
SUSE-SR:2006:028
vendor-advisory
x_refsource_SUSE
23015
third-party-advisory
x_refsource_SECUNIA
ADV-2007-1267
vdb-entry
x_refsource_VUPEN
https://issues.rpath.com/browse/RPL-810
x_refsource_CONFIRM
GLSA-200611-16
vendor-advisory
x_refsource_GENTOO
23335
third-party-advisory
x_refsource_SECUNIA
23112
third-party-advisory
x_refsource_SECUNIA
http://www.vmware.com/support/vi3/doc/esx-2559638-patch.html
x_refsource_CONFIRM
2006-0063
vendor-advisory
x_refsource_TRUSTIX
24788
third-party-advisory
x_refsource_SECUNIA
20061127 rPSA-2006-0219-1 info install-info texinfo
mailing-list
x_refsource_BUGTRAQ
22898
third-party-advisory
x_refsource_SECUNIA
22929
third-party-advisory
x_refsource_SECUNIA
oval:org.mitre.oval:def:10893
vdb-entry
signature
x_refsource_OVAL
texinfo-texindex-bo(30158)
vdb-entry
x_refsource_XF
OpenPKG-SA-2006.034
vendor-advisory
x_refsource_OPENPKG
http://www.vmware.com/support/vi3/doc/esx-1121906-patch.html
x_refsource_CONFIRM
22798
third-party-advisory
x_refsource_SECUNIA
DSA-1219
vendor-advisory
x_refsource_DEBIAN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now