Heap-based buffer overflow in the ole_info_read_metabat function in Gnome Structured...

7.5 CVSS

Vulnerability Description

Heap-based buffer overflow in the ole_info_read_metabat function in Gnome Structured File library (libgsf) 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a large num_metabat value in an OLE document, which causes the ole_init_info function to allocate insufficient memory.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-4514

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

libgsf

View all reports →

Affected Software

libgsf

Vulnerable Versions:

1.11.1, 1.13.2, 1.14, 1.14.1

Timeline

Official Publish: November 30th, 2006

Last Modified: August 7th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.