CVE-2006-2362

7.3 highEPSS 14%

High (7.3) in gnu binutils. EPSS 14% chance of exploitation in the next 30 days.

Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a file with a crafted Tektronix Hex Format (TekHex) record in which the length character is not a valid hexadecimal character.

Severity

CVSS 3.1

7.3 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 14% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2006-05-15
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

gnu:binutils

References

http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html
http://secunia.com/advisories/20188
http://secunia.com/advisories/20531
http://secunia.com/advisories/20550
http://secunia.com/advisories/22932

Check your stack JSON