Heap-based buffer overflow in the ole_info_read_metabat function in Gnome Structured File library (libgsf) 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a large num_metabat value in an OLE document, which causes the ole_init_info function to allocate insufficient memory.

From Red Hat Security Advisory 2007:0011 :

Updated libgsf packages that fix a buffer overflow flaw are now available.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The GNOME Structured File Library is a utility library for reading and writing structured file formats.

A heap based buffer overflow flaw was found in the way GNOME Structured File Library processes and certain OLE documents. If an person opened a specially crafted OLE file, it could cause the client application to crash or execute arbitrary code. (CVE-2006-4514)

Users of GNOME Structured File Library should upgrade to these updated packages, which contain a backported patch that resolves this issue.

Specially crafted OLE documents enabled attackers to use a heap buffer overlow for executing code. (CVE-2006-4514)

A heap overflow was discovered in the OLE processing code in libgsf.
If a user were tricked into opening a specially crafted OLE document, an attacker could execute arbitrary code with the user's privileges.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Specially crafted OLE documents enabled attackers to use a heap buffer overlow for executing code (CVE-2006-4514).

'infamous41md' discovered a heap buffer overflow vulnerability in libgsf, a GNOME library for reading and writing structured file formats, which could lead to the execution of arbitrary code.

The updated packages have been patched to correct this problem.

Updated libgsf packages that fix a buffer overflow flaw are now available.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The GNOME Structured File Library is a utility library for reading and writing structured file formats.

A heap based buffer overflow flaw was found in the way GNOME Structured File Library processes and certain OLE documents. If an person opened a specially crafted OLE file, it could cause the client application to crash or execute arbitrary code. (CVE-2006-4514)

Users of GNOME Structured File Library should upgrade to these updated packages, which contain a backported patch that resolves this issue.

The remote host is affected by the vulnerability described in GLSA-200612-13 (libgsf: Buffer overflow)

    'infamous41md' has discovered that the 'ole_init_info' function may     allocate too little memory for storing the contents of an OLE document,     resulting in a heap buffer overflow.
  Impact :

    An attacker could entice a user to open a specially crafted OLE     document, and possibly execute arbitrary code with the rights of the     user opening the document.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
67437	Oracle Linux 3 / 4 : libgsf (ELSA-2007-0011)	Nessus	Oracle Linux Local Security Checks	high
41108	SuSE9 Security Update : libgsf (YOU Patch Number 11342)	Nessus	SuSE Local Security Checks	high
29501	SuSE 10 Security Update : libgsf (ZYPP Patch Number 2363)	Nessus	SuSE Local Security Checks	high
27976	Ubuntu 5.10 / 6.06 LTS / 6.10 : libgsf vulnerability (USN-391-1)	Nessus	Ubuntu Local Security Checks	high
27324	openSUSE 10 Security Update : libgsf (libgsf-2364)	Nessus	SuSE Local Security Checks	high
24604	Mandrake Linux Security Advisory : libgsf (MDKSA-2006:220)	Nessus	Mandriva Local Security Checks	high
24211	RHEL 3 / 4 : libgsf (RHSA-2007:0011)	Nessus	Red Hat Local Security Checks	high
24024	CentOS 3 / 4 : libgsf (CESA-2007:0011)	Nessus	CentOS Local Security Checks	high
23865	GLSA-200612-13 : libgsf: Buffer overflow	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2006-4514

high

Tenable Plugins

high

high

high

high

high

high

high

high

high