Lucene search

[email protected]CVE-2006-2378

HistoryJun 13, 2006 - 7:06 p.m.

CVE-2006-2378

2006-06-1319:06:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-2378

buffer overflow

art image rendering

jgdw400.dll

microsoft windows xp

server 2003

windows 98

windows me

heap corruption

remote code execution

7.8 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.891 High

EPSS

Percentile

98.7%

JSON

Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption.

CPENameOperatorVersion
microsoft:iemicrosoft ieeq6.0
microsoft:internet_explorermicrosoft internet explorereq5.0.1
microsoft:internet_explorermicrosoft internet explorereq6.0
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise_edition_64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqdatacenter_edition_64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqstandard
microsoft:windows_xpmicrosoft windows xpeq*
microsoft:windows_2003_servermicrosoft windows 2003 servereqweb
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise_64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqstandard_64-bit

CPE	Name	Operator	Version
microsoft:ie	microsoft ie	eq	6.0
microsoft:internet_explorer	microsoft internet explorer	eq	5.0.1
microsoft:internet_explorer	microsoft internet explorer	eq	6.0
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise_edition_64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	datacenter_edition_64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	standard
microsoft:windows_xp	microsoft windows xp	eq	*
microsoft:windows_2003_server	microsoft windows 2003 server	eq	web
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise_64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	standard_64-bit

Rows per page:

1-10 of 141

References

secunia.com/advisories/20605

securitytracker.com/id?1016292

www.idefense.com/intelligence/vulnerabilities/display.php?id=407

www.kb.cert.org/vuls/id/923236

www.osvdb.org/26432

www.securityfocus.com/bid/18394

www.us-cert.gov/cas/techalerts/TA06-164A.html

www.vupen.com/english/advisories/2006/2320

docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-022

exchange.xforce.ibmcloud.com/vulnerabilities/26809

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1590

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1640

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1668

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1756

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1866

7.8 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.891 High

EPSS

Percentile

98.7%

JSON

Related for CVE-2006-2378

cert1 checkpoint_advisories2 prion1 securityvulns2 nessus1