CVE-2006-4573

GNU Screen < 4.0.3 - Denial of Service in UTF8 Combining Characters Handling

Title source: llm

Description

Multiple unspecified vulnerabilities in the "utf8 combining characters handling" (utf8_handle_comb function in encoding.c) in screen before 4.0.3 allows user-assisted attackers to cause a denial of service (crash or hang) via certain UTF8 sequences.

References (21)

Core 21

Core References

Vendor Advisory x_refsource_confirm

http://docs.info.apple.com/article.html?artnum=305530

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/1939

Vendor Advisory vendor-advisory x_refsource_slackware

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.480775

Vendor Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDKSA-2006:191

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2006/4189

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2006/dsa-1202

Mailing List vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce/2007/May/msg00004.html

Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/usn-370-1

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/25402

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/22611

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/22573

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/22707

Patch mailing-list x_refsource_mlist

http://lists.gnu.org/archive/html/screen-users/2006-10/msg00028.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/20727

Issue Tracking x_refsource_confirm

https://issues.rpath.com/browse/RPL-734

Third Party Advisory vendor-advisory x_refsource_gentoo

http://security.gentoo.org/glsa/glsa-200611-01.xml

Vendor Advisory vendor-advisory x_refsource_openpkg

http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.026-screen.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/22583

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/22726

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/22647

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/22649

Scores

EPSS 0.0119

EPSS Percentile 79.0%

Details

Status published

Products (1)

gnu/screen < 4.0.2

Published Oct 24, 2006

Tracked Since Feb 18, 2026