{"id":"CVE-2006-2458","aliases":["GHSA-f836-7jqw-3684","PYSEC-2006-4"],"url":"https://o3.security/vulnerability/CVE-2006-2458","summary":"Libextractor multiple heap-based buffer overflows","details":"Multiple heap-based buffer overflows in Libextractor 0.5.13 and earlier allow remote attackers to execute arbitrary code via (1) the asf_read_header function in the ASF plugin (plugins/asfextractor.c), and (2) the parse_trak_atom function in the QT plugin (plugins/qtextractor.c).","published":"2006-05-18T23:02:00Z","modified":"2026-04-10T03:38:26.331699Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":3,"affectedPackages":[{"ecosystem":"PyPI","name":"extractor","fixedVersion":null}],"fix":null,"references":[{"type":"ADVISORY","url":"http://secunia.com/advisories/20150"},{"type":"ADVISORY","url":"http://secunia.com/advisories/20160"},{"type":"ADVISORY","url":"http://secunia.com/advisories/20326"},{"type":"ADVISORY","url":"http://secunia.com/advisories/20457"},{"type":"ADVISORY","url":"http://www.debian.org/security/2006/dsa-1081"},{"type":"ADVISORY","url":"http://www.novell.com/linux/security/advisories/2006-06-02.html"},{"type":"ADVISORY","url":"http://www.vupen.com/english/advisories/2006/1848"},{"type":"EVIDENCE","url":"http://securitytracker.com/id?1016118"},{"type":"EVIDENCE","url":"http://www.securityfocus.com/bid/18021"},{"type":"FIX","url":"http://secunia.com/advisories/20150"},{"type":"FIX","url":"http://securitytracker.com/id?1016118"},{"type":"FIX","url":"http://www.securityfocus.com/bid/18021"},{"type":"WEB","url":"http://gnunet.org/libextractor/"},{"type":"WEB","url":"http://securityreason.com/securityalert/916"},{"type":"WEB","url":"http://www.gentoo.org/security/en/glsa/glsa-200605-14.xml"},{"type":"WEB","url":"http://www.securityfocus.com/archive/1/434288/100/0/threaded"},{"type":"WEB","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26531"},{"type":"WEB","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26532"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-04-10T03:38:26.331699Z"}}