CVE-2006-1060

🗓️ 11 Apr 2006 10:00:00Reported by Debian Security Bug TrackerType

debiancve🔗 security-tracker.debian.org👁 20 Views

Heap-based buffer overflow in zgv before 5.8 and xzgv before 0.8 might allow user-assisted attackers to execute arbitrary code via a JPEG image with more than 3 output components, such as a CMYK or YCCK color space, which causes less memory to be allocated than required

Reporter	Title	Published	Views	Family All 31
FreeBSD	zgv, xzgv -- heap overflow vulnerability	21 Apr 200600:00	–	freebsd
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
CVE	CVE-2006-1060	11 Apr 200610:00	–	cve
Cvelist	CVE-2006-1060	11 Apr 200610:00	–	cvelist
Debian	[SECURITY] [DSA 1037-1] New zgv packages fix arbitrary code execution	21 Apr 200615:50	–	debian
Debian	[SECURITY] [DSA 1037-1] New zgv packages fix arbitrary code execution	21 Apr 200615:50	–	debian
Debian	[SECURITY] [DSA 1038-1] New xzgv packages fix arbitrary code execution	22 Apr 200608:31	–	debian
Debian	[SECURITY] [DSA 1038-1] New xzgv packages fix arbitrary code execution	22 Apr 200608:31	–	debian
Tenable Nessus	Debian DSA-1037-1 : zgv - programming error	14 Oct 200600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	any	xzgv	0.8-5.1	xzgv_0.8-5.1_any.deb
Debian	12	any	xzgv	0.8-5.1	xzgv_0.8-5.1_any.deb
Debian	13	any	xzgv	0.8-5.1	xzgv_0.8-5.1_any.deb
Debian	999	any	xzgv	0.8-5.1	xzgv_0.8-5.1_any.deb

11 Apr 2006 10:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 27.5

EPSS0.04073