Dia 0.8x0.9x - Filename Remote Format String

Dia 0.8x0.9x - Filename Remote Format String source: https://www.securityfocus.com/bid/18078/info Dia is prone to a remote format-string vulnerability. This issue arises when the application handles specially crafted filenames. An attacker can exploit this vulnerability by crafting a malicious...

Dia 0.8x/0.9x - Filename Remote Format String

source: https://www.securityfocus.com/bid/18078/info Dia is prone to a remote format-string vulnerability. This issue arises when the application handles specially crafted filenames. An attacker can exploit this vulnerability by crafting a malicious filename that contains format specifiers and th...

Format string

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a...

CVE-2006-2480

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a...

CVE-2006-2480

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a...

DEBIAN-CVE-2006-2480

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a...

CVE-2006-2480

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a...

CVE-2006-2480

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a...

CVE-2006-2480

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a...

CVE-2006-2480

Dia (0.94) is affected by a format-string vulnerability (CVE-2006-2480) that could allow a remote attacker to cause a crash or potentially execute code by crafted input (e.g., a crafted .dia/.bmp filename). Several connected advisories confirm this issue and reference CVE-2006-2453 as well, with ...

FreeBSD : dia -- XFig Import Plugin Buffer Overflow (b5fc63ad-c4c3-11da-9699-00123ffe8333)

Secunia reports : Some vulnerabilities have been reported in Dia, which potentially can be exploited by malicious people to compromise a user's system. The vulnerabilities are caused due to boundary errors within the XFig import plugin. This can be exploited to cause buffer overflows and may allo...

RHEL 2.1 / 4 : dia (RHSA-2006:0280)

An updated Dia package that fixes several buffer overflow bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Dia drawing program is designed to draw various types of diagrams. infamous41md discovered three buffer overfl...

dia security update

CentOS Errata and Security Advisory CESA-2006:0280-01 An updated Dia package that fixes several buffer overflow bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Dia drawing program is designed to draw various types of...

dia security update

CentOS Errata and Security Advisory CESA-2006:0280 An updated Dia package that fixes several buffer overflow bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Dia drawing program is designed to draw various types of...

Moderate: Red Hat Security Advisory: dia security update

An updated Dia package that fixes several buffer overflow bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Dia drawing program is designed to draw various types of diagrams. infamous41md discovered three buffer overfl...

Dia multiple buffer overflows

Multiple buffer overflows in the xfig import code xfig-import.c in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid 1 color index, 2 number of points, or 3 depth...

GLSA-200604-14 : Dia: Arbitrary code execution through XFig import

The remote host is affected by the vulnerability described in GLSA-200604-14 Dia: Arbitrary code execution through XFig import infamous41md discovered multiple buffer overflows in Dia's XFig file import plugin. Impact : By enticing a user to import a specially crafted XFig file into Dia, an...

Fedora Core 4 : dia-0.94-13.fc4 (2006-261)

Fixes CVE-2006-1550 Dia multiple buffer overflows Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] [DSA 1025-1] New dia packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1025-1 [email protected] http://www.debian.org/security/ Martin Schulze April 6th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1025-1] New dia packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1025-1 [email protected] http://www.debian.org/security/ Martin Schulze April 6th, 2006 http://www.debian.org/security/faq -...