7.6

CVE-2006-1550

Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid (1) color index, (2) number of points, or (3) depth.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dia ≫ Dia Version0.87
Dia ≫ Dia Version0.88.1
Dia ≫ Dia Version0.91
Dia ≫ Dia Version0.92.2
Dia ≫ Dia Version0.93
Dia ≫ Dia Version0.94
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.41% 0.82
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.6 4.9 10
AV:N/AC:H/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.debian.org/security/2006/dsa-1025
http://secunia.com/advisories/19897
Vendor Advisory
http://www.novell.com/linux/security/advisories/2006_04_28.html
http://mail.gnome.org/archives/dia-list/2006-March/msg00149.html
http://secunia.com/advisories/19469
Vendor Advisory
http://secunia.com/advisories/19505
Vendor Advisory
http://secunia.com/advisories/19507
Vendor Advisory
http://secunia.com/advisories/19543
Vendor Advisory
http://secunia.com/advisories/19546
Vendor Advisory
http://secunia.com/advisories/19765
Vendor Advisory
http://secunia.com/advisories/19959
Vendor Advisory
http://securitytracker.com/id?1015853
http://www.gentoo.org/security/en/glsa/glsa-200604-14.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2006:062
http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00021.html
http://www.redhat.com/support/errata/RHSA-2006-0280.html
http://www.securityfocus.com/archive/1/429357/100/0/threaded
http://www.securityfocus.com/bid/17310
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/25566
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10361
https://usn.ubuntu.com/266-1/