CVE-2006-1550

Published: Mar 30, 2006Modified: Apr 16, 2026

7.6

Vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Exploitability: 4.9 / Impact: 10.0

Source: NVD

Description

Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid (1) color index, (2) number of points, or (3) depth.

Affected (6)

Products: Dia: Dia

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Dia Dia	Version 0.87
Dia Dia	Version 0.88.1
Dia Dia	Version 0.91
Dia Dia	Version 0.92.2
Dia Dia	Version 0.93
Dia Dia	Version 0.94

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (42)

http://mail.gnome.org/archives/dia-list/2006-March/msg00149.html

Source: secalert@redhat.com

http://secunia.com/advisories/19469

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/19505

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/19507

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/19543

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/19546

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/19765

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/19897

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/19959

Source: secalert@redhat.com

Vendor Advisory

http://securitytracker.com/id?1015853

Source: secalert@redhat.com

http://www.debian.org/security/2006/dsa-1025

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200604-14.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:062

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_04_28.html

Source: secalert@redhat.com

http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00021.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0280.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/429357/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/17310

Source: secalert@redhat.com

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/25566

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10361

Source: secalert@redhat.com

https://usn.ubuntu.com/266-1/

Source: secalert@redhat.com

http://mail.gnome.org/archives/dia-list/2006-March/msg00149.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19469

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/19505

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/19507

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/19543

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/19546

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/19765

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/19897

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/19959

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1015853

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2006/dsa-1025

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200604-14.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:062

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2006_04_28.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00021.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2006-0280.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/429357/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/17310

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/25566

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10361

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/266-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.