What’s Vulnerable › Vulnerabilities

CVE-2006-4810

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-11-08 · updated 2026-06-16

Description

Buffer overflow in the readline function in util/texindex.c, as used by the (1) texi2dvi and (2) texindex commands, in texinfo 4.8 and earlier allows local users to execute arbitrary code via a crafted Texinfo file.

Affected products

• GNU Texinfo: through 4.8

References

• http://cvs.savannah.gnu.org/viewcvs/texinfo/texinfo/util/texindex.c?r1=1.16&r2=1.17
• http://secunia.com/advisories/22725
• http://secunia.com/advisories/22777
• http://secunia.com/advisories/22798
• http://secunia.com/advisories/22898
• http://secunia.com/advisories/22929
• http://secunia.com/advisories/22995
• http://secunia.com/advisories/23015
• http://secunia.com/advisories/23112
• http://secunia.com/advisories/23335
• http://secunia.com/advisories/24788

Get alerted when CVE-2006-4810 or the next vulnerability affects your stack