CVE-2006-4573 Multiple unspecified vulnerabilities in the "utf8 combining characters handling" (utf8_handle_comb function in encoding.c) in screen before 4.0.3 allows user-assisted attackers to cause a denial of se...
LowCVSS 2.6
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in the "utf8 combining characters handling" (utf8_handle_comb function in encoding.c) in screen before 4.0.3 allows user-assisted attackers to cause a denial of service (crash or hang) via certain UTF8 sequences.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU screen | <= 4.0.2 | No fix listed |
| debian/screen(Debian:12) | < 4.0.3-0.1 | 4.0.3-0.1 |
| debian/screen(Debian:13) | < 4.0.3-0.1 | 4.0.3-0.1 |
| debian/screen(Debian:14) | < 4.0.3-0.1 | 4.0.3-0.1 |
References
- docs.info.apple.com
- APPLE-SA-2007-05-24 vendor-advisory
- [screen-users] 20061023 Secfix release for screen: screen-4.0.3 mailing-list patch
- 22573 third-party-advisory
- 22583 third-party-advisory
- 22611 third-party-advisory
- 22647 third-party-advisory
- 22649 third-party-advisory
- 22707 third-party-advisory
- 22726 third-party-advisory
- 25402 third-party-advisory
- GLSA-200611-01 vendor-advisory
- SSA:2006-307-02 vendor-advisory
- DSA-1202 vendor-advisory
- MDKSA-2006:191 vendor-advisory
- OpenPKG-SA-2006.026 vendor-advisory
- 20727 vdb-entry
- USN-370-1 vendor-advisory
- ADV-2006-4189 vdb-entry
- ADV-2007-1939 vdb-entry
- issues.rpath.com
- Debian Security Tracker CVE-2006-4573 vendor-advisory
- bugs.debian.org issue-tracking