CVE-2006-4573

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-10-24 · updated 2026-06-16

Description

Multiple unspecified vulnerabilities in the "utf8 combining characters handling" (utf8_handle_comb function in encoding.c) in screen before 4.0.3 allows user-assisted attackers to cause a denial of service (crash or hang) via certain UTF8 sequences.

Affected products

GNU Screen: through 4.0.2

References

http://docs.info.apple.com/article.html?artnum=305530
http://lists.apple.com/archives/security-announce/2007/May/msg00004.html
http://lists.gnu.org/archive/html/screen-users/2006-10/msg00028.html
http://secunia.com/advisories/22573
http://secunia.com/advisories/22583
http://secunia.com/advisories/22611
http://secunia.com/advisories/22647
http://secunia.com/advisories/22649
http://secunia.com/advisories/22707
http://secunia.com/advisories/22726
http://secunia.com/advisories/25402
http://security.gentoo.org/glsa/glsa-200611-01.xml

Get alerted when CVE-2006-4573 or the next vulnerability affects your stack