Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2006-1060
HistoryApr 11, 2006 - 10:02 a.m.

CVE-2006-1060

2006-04-1110:02:00
CWE-119
[email protected]
web.nvd.nist.gov
37
cve-2006-1060
zgv
xzgv
buffer overflow
arbitrary code execution
jpeg
image
memory allocation

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.021 Low

EPSS

Percentile

89.3%

JSON

Heap-based buffer overflow in zgv before 5.8 and xzgv before 0.8 might allow user-assisted attackers to execute arbitrary code via a JPEG image with more than 3 output components, such as a CMYK or YCCK color space, which causes less memory to be allocated than required.

Affected configurations

NVD
Node
xzgvxzgvRange≤0.8
CPENameOperatorVersion
xzgv:xzgvxzgvle0.8

Related

freebsd 1
nessus 4
openvas 8
prion 1
debian 4
debiancve 1
nvd 1
ubuntucve 1
gentoo 1
osv 1
cvelist 1
freebsd
freebsd
zgv, xzgv -- heap overflow vulnerability
2006-04-21 00:00:00
nessus
nessus
GLSA-200604-10 : zgv, xzgv: Heap overflow
2006-04-21 00:00:00
FreeBSD : zgv, xzgv -- heap overflow vulnerability (a813a219-d2d4-11da-a672-000e0c2e438a)
2006-10-10 00:00:00
Debian DSA-1038-1 : xzgv - programming error
2006-10-14 00:00:00
openvas
openvas
Debian Security Advisory DSA 1037-1 (zgv)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-1038-1)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-1037-1)
2008-01-17 00:00:00
prion
prion
Heap overflow
2006-04-11 10:02:00
debian
debian
[SECURITY] [DSA 1037-1] New zgv packages fix arbitrary code execution
2006-04-21 15:50:16
[SECURITY] [DSA 1038-1] New xzgv packages fix arbitrary code execution
2006-04-22 08:31:28
[SECURITY] [DSA 1038-1] New xzgv packages fix arbitrary code execution
2006-04-22 08:31:28
debiancve
debiancve
CVE-2006-1060
2006-04-11 10:02:00
nvd
nvd
CVE-2006-1060
2006-04-11 10:02:00
ubuntucve
ubuntucve
CVE-2006-1060
2006-04-11 00:00:00
gentoo
gentoo
zgv, xzgv: Heap overflow
2006-04-21 00:00:00
osv
osv
xzgv - programming error
2006-04-22 00:00:00
cvelist
cvelist
CVE-2006-1060
2006-04-11 10:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.021 Low

EPSS

Percentile

89.3%

JSON
Related for CVE-2006-1060
freebsd1nessus4openvas8prion1debian4debiancve1nvd1ubuntucve1gentoo1osv1cvelist1