CVE-2006-3668
NoneCVSS
—
EPSS
10.1%
Published
Jul 18, 2006
CISA due date
—
The record
Heap-based buffer overflow in the it_read_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows user-assisted attackers to execute arbitrary code via a ".it" (Impulse Tracker) file with an envelope with a large number of nodes.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | libdumb | 0 | 1:0.9.3-5 |
| Debian:11 | libdumb | 0 | 1:0.9.3-5 |
| Debian:12 | libdumb | 0 | 1:0.9.3-5 |
| Debian:13 | libdumb | 0 | 1:0.9.3-5 |
| Debian:3.1 | libdumb | 0 | 1:0.9.2-6 |
| openSUSE:Tumbleweed | dumb | 0 | 2.0.3-1.3 |
Related vulnerabilities
- CVE-2026-13573 A vulnerability was found in llvm llvm-project up to 22.1.6. CWE-119
- CVE-2026-13574 A vulnerability was determined in llvm llvm-project up to 22.1.6. CWE-119
- CVE-2026-12806 A vulnerability has been found in Edimax BR-6478AC V2 1.23. CWE-119
- CVE-2026-12805 A flaw has been found in OFFIS DCMTK up to 3.7.0. CWE-119
- CVE-2026-42488 Some shadow paging errors paths will switch the page-tables without updating the… CWE-119
- CVE-2026-12327 Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and… CWE-119
- CVE-2026-12330 Incorrect boundary conditions in the Internationalization component. CWE-119
- CVE-2026-12326 Memory safety bugs present in Firefox 151 and Thunderbird 151. CWE-119