PT-2006-3428 · Dia+1 · Dia+1

Hans De Goede · Publicado 2006-05-19 · Atualizado 2024-06-15 · CVE-2006-2480

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Dia version 0.94

Description The issue allows user-assisted attackers to cause a denial of service and possibly execute arbitrary code by triggering errors or warnings. This can be achieved through format string specifiers in a .bmp filename. Other mechanisms for input, such as a crafted .dia file, are also automatically processed by Dia.

Recommendations For Dia version 0.94, avoid using format string specifiers in filenames until a patch is available. As a temporary workaround, consider restricting the use of .bmp and .dia files to minimize the risk of exploitation.

Exploit

Correção

DoS

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2006-2480

OPENSUSE-SU-2024:10716-1

RHSA-2006:0541

RHSA-2006_0541

Produtos afetados

Dia

Red Hat

Referências · 30

• 🔥 https://exploit-db.com/exploits/27903 · Exploit
• 🔥 http://securityfocus.com/archive/82/433313/30/0/threaded · Exploit
• 🔥 http://kandangjamur.net/tutorial/dia.txt · Exploit
• 🔥 http://bugzilla.gnome.org/show_bug.cgi?id=342111 · Exploit
• http://osvdb.org/25699 · Nota
• http://secunia.com/advisories/20254 · Aviso do Fabricante
• http://securitytracker.com/id?1016203 · Nota
• http://gentoo.org/security/en/glsa/glsa-200606-03.xml · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2006-2480 · Aviso do Fabricante
• http://secunia.com/advisories/20422 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/1908 · Aviso do Fabricante
• http://securityfocus.com/bid/18078 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-2480 · Aviso do Fabricante
• http://secunia.com/advisories/20199 · Aviso do Fabricante
• https://usn.ubuntu.com/286-1 · Aviso do Fabricante