Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2006-2378 | First vendor Publication | 2006-06-13 |
| Vendor | Cve | Last vendor Modification | 2021-07-23 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 6.8 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Medium |
| Cvss Expoit Score | 8.6 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2378 |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:1590 | |||
| Oval ID: | oval:org.mitre.oval:def:1590 | ||
| Title: | ART Image Rendering Vulnerability (2K/XP) | ||
| Description: | Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2006-2378 | Version: | 8 |
| Platform(s): | Microsoft Windows 2000 Microsoft Windows XP | Product(s): | |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:1640 | |||
| Oval ID: | oval:org.mitre.oval:def:1640 | ||
| Title: | ART Image Rendering Vulnerability (XP,SP2) | ||
| Description: | Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2006-2378 | Version: | 6 |
| Platform(s): | Microsoft Windows XP | Product(s): | |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:1668 | |||
| Oval ID: | oval:org.mitre.oval:def:1668 | ||
| Title: | ART Image Rendering Vulnerability (64-bit XP) | ||
| Description: | Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2006-2378 | Version: | 5 |
| Platform(s): | Microsoft Windows XP | Product(s): | |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:1756 | |||
| Oval ID: | oval:org.mitre.oval:def:1756 | ||
| Title: | ART Image Rendering Vulnerability (Win2K) | ||
| Description: | Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2006-2378 | Version: | 9 |
| Platform(s): | Microsoft Windows 2000 | Product(s): | |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:1866 | |||
| Oval ID: | oval:org.mitre.oval:def:1866 | ||
| Title: | ART Image Rendering Vulnerability (WinS03) | ||
| Description: | Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2006-2378 | Version: | 3 |
| Platform(s): | Microsoft Windows Server 2003 | Product(s): | |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 26432 | Microsoft Windows jgdw400.dll ART Image Rendering Overflow A local overflow exists in Microsoft Windows. The jgdw400.dll library fails to perform correct boundary checking on .ART files which can result in a buffer overflow. With a specially crafted request, an attacker can perform arbitrary code execution resulting in a loss of integrity. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2006-06-13 | Name : Arbitrary code can be executed on the remote host through the web client. File : smb_nt_ms06-022.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2021-07-27 00:24:35 |
|
| 2021-07-24 01:44:13 |
|
| 2021-07-24 01:02:34 |
|
| 2021-07-23 17:24:39 |
|
| 2021-07-23 01:44:02 |
|
| 2021-07-23 01:02:33 |
|
| 2021-07-22 21:24:58 |
|
| 2021-05-04 12:04:02 |
|
| 2021-04-22 01:04:35 |
|
| 2020-05-23 00:17:47 |
|
| 2018-10-13 00:22:34 |
|
| 2017-10-11 09:23:41 |
|
| 2017-07-20 09:23:35 |
|
| 2016-06-28 15:47:10 |
|
| 2016-04-26 14:37:28 |
|
| 2014-02-17 10:35:50 |
|
| 2013-05-11 10:57:05 |
|
