CVE-2006-2378
medium · 6.8Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption.
6.8
CVSS
34.8%
EPSS (exploit prob.)
98th
EPSS percentile
2006-06-13
Published
AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | ie | 6.0 |
| microsoft | internet_explorer | 5.0.1 |
| microsoft | internet_explorer | 5.0.1 |
| microsoft | internet_explorer | 5.0.1 |
| microsoft | internet_explorer | 5.0.1 |
| microsoft | internet_explorer | 5.0.1 |
| microsoft | internet_explorer | 6.0 |
| microsoft | windows_2003_server | datacenter_edition |
| microsoft | windows_2003_server | datacenter_edition |
| microsoft | windows_2003_server | datacenter_edition_64-bit |
| microsoft | windows_2003_server | datacenter_edition_64-bit |
| microsoft | windows_2003_server | enterprise_64-bit |
| microsoft | windows_2003_server | enterprise_edition |
| microsoft | windows_2003_server | enterprise_edition_64-bit |
| microsoft | windows_2003_server | enterprise_edition_64-bit |
| microsoft | windows_2003_server | r2 |
| microsoft | windows_2003_server | sp1 |
| microsoft | windows_2003_server | standard |
| microsoft | windows_2003_server | standard |
| microsoft | windows_2003_server | standard_64-bit |
| microsoft | windows_2003_server | web |
| microsoft | windows_2003_server | web |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/20605
- http://securitytracker.com/id?1016292
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=407
- http://www.kb.cert.org/vuls/id/923236
- http://www.osvdb.org/26432
- http://www.securityfocus.com/bid/18394
- http://www.us-cert.gov/cas/techalerts/TA06-164A.html
- http://www.vupen.com/english/advisories/2006/2320
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-022
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26809
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1590
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1640
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1668
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1756
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1866
- http://secunia.com/advisories/20605
- http://securitytracker.com/id?1016292
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=407
- http://www.kb.cert.org/vuls/id/923236
- http://www.osvdb.org/26432
- http://www.securityfocus.com/bid/18394
- http://www.us-cert.gov/cas/techalerts/TA06-164A.html
- http://www.vupen.com/english/advisories/2006/2320
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-022
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26809
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2006-2378