CVEvulnerability

CVE-2006-2458

4.0 MEDIUM Published 2006-05-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-05-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:N

Description

Multiple heap-based buffer overflows in Libextractor 0.5.13 and earlier allow remote attackers to execute arbitrary code via (1) the asf_read_header function in the ASF plugin (plugins/asfextractor.c), and (2) the parse_trak_atom function in the QT plugin (plugins/qtextractor.c).

Affected configurations

• libextractor libextractor 0.5.13

References