CVE-2006-1827

Published: Apr 18, 2006Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length.

Affected (38)

Products: Digium: Asterisk

Digium

1 product

Asterisk

Configuration A

38 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Up to 1.2.6
Digium Asterisk	Version 0.1.0
Digium Asterisk	Version 0.1.10
Digium Asterisk	Version 0.1.11
Digium Asterisk	Version 0.1.12
Digium Asterisk	Version 0.1.1
Digium Asterisk	Version 0.1.2
Digium Asterisk	Version 0.1.3
Digium Asterisk	Version 0.1.4
Digium Asterisk	Version 0.1.5
Digium Asterisk	Version 0.1.6
Digium Asterisk	Version 0.1.7
Digium Asterisk	Version 0.1.8
Digium Asterisk	Version 0.1.9.1
Digium Asterisk	Version 0.1.9
Digium Asterisk	Version 0.2.0
Digium Asterisk	Version 0.2
Digium Asterisk	Version 0.3.0
Digium Asterisk	Version 0.3
Digium Asterisk	Version 0.4.0
Digium Asterisk	Version 0.4
Digium Asterisk	Version 0.5.0
Digium Asterisk	Version 0.7.0
Digium Asterisk	Version 0.7.1
Digium Asterisk	Version 0.7.2
Digium Asterisk	Version 1.0.0
Digium Asterisk	Version 1.0.1
Digium Asterisk	Version 1.0.2
Digium Asterisk	Version 1.0.3
Digium Asterisk	Version 1.0.4
Digium Asterisk	Version 1.0.5
Digium Asterisk	Version 1.0.6
Digium Asterisk	Version 1.0.7
Digium Asterisk	Version 1.0.8
Digium Asterisk	Version 1.0.9
Digium Asterisk	Version 1.0_rc1
Digium Asterisk	Version 1.0_rc2
Digium Asterisk	Version 1.2.0_beta1