NVD

Id
61175  
Name
CVE-2006-2480  
Description
Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a command line argument, but there are other mechanisms for input that are automatically processed by Dia, such as a crafted .dia file.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-05-19  
Modified Date
2011-03-07  
Seq
2006-2480  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
316175 61175 CVE-2006-2480 http://bugzilla.gnome.org/show_bug.cgi?id=342111  View
316176 61175 CVE-2006-2480 http://kandangjamur.net/tutorial/dia.txt  View
316177 61175 CVE-2006-2480 oval:org.mitre.oval:def:11224  View
316178 61175 CVE-2006-2480 1016203  View
316179 61175 CVE-2006-2480 GLSA-200606-03  View
316180 61175 CVE-2006-2480 MDKSA-2006:093  View
316181 61175 CVE-2006-2480 SUSE-SR:2006:012  View
316182 61175 CVE-2006-2480 RHSA-2006:0541  View
316183 61175 CVE-2006-2480 20060506 DIA file name handling format string  View
316184 61175 CVE-2006-2480 18078  View
316185 61175 CVE-2006-2480 USN-286-1  View
316186 61175 CVE-2006-2480 ADV-2006-1908  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58068 JVNDB-2006-000264 Dia のビットマップ形式のファイル名処理におけるフォーマットストリングの脆弱性 ------------ CVE-2006-2480 18582 CVE-2006-2480 61175 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000264.html 2006-05-06 2007-04-01 View