Lucene search

K
cve[email protected]CVE-2006-6146
HistoryNov 28, 2006 - 11:28 p.m.

CVE-2006-6146

2006-11-2823:28:00
web.nvd.nist.gov
21
cve-2006-6146
buffer overflow
hpdf_page_circle
libharu
denial of service
application crash
pdf
security vulnerability

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

7.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.3%

Buffer overflow in the HPDF_Page_Circle function in hpdf_page_operator.c in Takeshi Kanno Haru Free PDF Library (libharu2, aka libharu) 2.0.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via certain arguments that yield a large amount of PDF data, as demonstrated by a filled circle.

Affected configurations

NVD
Node
takeshi_kannoharu_free_pdf_libraryMatch2.0
OR
takeshi_kannoharu_free_pdf_libraryMatch2.0.1
OR
takeshi_kannoharu_free_pdf_libraryMatch2.0.2
OR
takeshi_kannoharu_free_pdf_libraryMatch2.0.3
OR
takeshi_kannoharu_free_pdf_libraryMatch2.0.4
OR
takeshi_kannoharu_free_pdf_libraryMatch2.0.5
OR
takeshi_kannoharu_free_pdf_libraryMatch2.0.6
OR
takeshi_kannoharu_free_pdf_libraryMatch2.0.7

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

7.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.3%

Related for CVE-2006-6146