CVE-2006-1513

MediumCVSS 5.1/10Last modified Jun 16, 2026

Description

Multiple buffer overflows in abc2ps before 1.3.3 allow user-assisted attackers to execute arbitrary code via crafted ABC music files.

Metrics

CVSS 2.0 5.1/10AV:N/AC:H/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/19787Vendor Advisory
http://secunia.com/advisories/19807Vendor Advisory
http://www.debian.org/security/2006/dsa-1041Patch, Vendor Advisory
http://www.securityfocus.com/bid/17689
http://www.vupen.com/english/advisories/2006/1511Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26043
http://secunia.com/advisories/19787Vendor Advisory
http://secunia.com/advisories/19807Vendor Advisory
http://www.debian.org/security/2006/dsa-1041Patch, Vendor Advisory
http://www.securityfocus.com/bid/17689
http://www.vupen.com/english/advisories/2006/1511Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26043

Timeline

Published: Apr 25, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-15147.5Multiple buffer overflows in the abcmidi-yaps translator in abcmidi 20050101, and other versions, allow remote attackers to execute arbitrar CVE-2006-15157.5Buffer overflow in the addnewword function in typespeed 0.4.4 and earlier might allow remote attackers to execute arbitrary code via unknown CVE-2006-15165.0The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attacker CVE-2006-15175.0sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information CVE-2006-15186.5Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code CVE-2006-15206.4Format string vulnerability in ANSI C Sender Policy Framework library (libspf) before 1.0.0-p5, when debugging is enabled, allows remote att CVE-2006-15224.9The sys_add_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and possibly earlier versions, allows local users to c CVE-2006-152310.0The __group_complete_signal function in the RCU signal handling (signal.c) in Linux kernel 2.6.16, and possibly other versions, has unknown CVE-2006-15243.6madvise_remove in Linux kernel 2.6.16 up to 2.6.16.6 does not follow file and mmap restrictions, which allows local users to bypass IPC perm CVE-2006-15254.9ip_route_input in Linux kernel 2.6 before 2.6.16.8 allows local users to cause a denial of service (panic) via a request for a route for a m CVE-2006-15262.1Buffer overflow in the X render (Xrender) extension in X.org X server 6.8.0 up to allows attackers to cause a denial of service (crash), as CVE-2006-15275.0The SCTP-netfilter code in Linux kernel before 2.6.16.13 allows remote attackers to trigger a denial of service (infinite loop) via unknown