CVE-2006-2362

CVE-2006-2362 describes a buffer overflow vulnerability in the getsym function of libbfd within GNU Binutils, affecting versions prior to 20060423. This flaw allows remote attackers to trigger a denial of service (application crash) and potentially execute arbitrary code by supplying a malformed Tektronix Hex Format file with an invalid length character. With a CVSS score of 7.3 (HIGH), this vulnerability is easily exploitable over a network with low attack complexity and no user interaction required, potentially leading to partial loss of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog or showing active exploitation, an exploit (EDB-27856) exists on ExploitDB, though there is minimal community discussion or media coverage.