PT-2006-3428 · Dia+1 · Dia+1

Hans De Goede · Published 2006-05-19 · Updated 2024-06-15 · CVE-2006-2480

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Dia version 0.94

Description The issue allows user-assisted attackers to cause a denial of service and possibly execute arbitrary code by triggering errors or warnings. This can be achieved through format string specifiers in a .bmp filename. Other mechanisms for input, such as a crafted .dia file, are also automatically processed by Dia.

Recommendations For Dia version 0.94, avoid using format string specifiers in filenames until a patch is available. As a temporary workaround, consider restricting the use of .bmp and .dia files to minimize the risk of exploitation.

Exploit

Fix

DoS

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2006-2480

OPENSUSE-SU-2024:10716-1

RHSA-2006:0541

RHSA-2006_0541

Affected Products

Dia

Red Hat

References · 30

• 🔥 https://exploit-db.com/exploits/27903 · Exploit
• 🔥 http://securityfocus.com/archive/82/433313/30/0/threaded · Exploit
• 🔥 http://kandangjamur.net/tutorial/dia.txt · Exploit
• 🔥 http://bugzilla.gnome.org/show_bug.cgi?id=342111 · Exploit
• http://secunia.com/advisories/20254 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200606-03.xml · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-2480 · Vendor Advisory
• http://secunia.com/advisories/20422 · Vendor Advisory
• http://vupen.com/english/advisories/2006/1908 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-2480 · Vendor Advisory
• http://secunia.com/advisories/20199 · Vendor Advisory
• https://usn.ubuntu.com/286-1 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:093 · Vendor Advisory
• http://secunia.com/advisories/20513 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006-06-02.html · Vendor Advisory