CVE-2006-2378

Published: Jun 13, 2006Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption.

Affected (32)

Products: Microsoft: Ie, Internet Explorer, Windows 2003 Server, Windows Xp

4 products

Internet Explorer

Windows 2003 Server

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Microsoft Ie	Version 6.0 sp1
Microsoft Internet Explorer	Version 5.0.1
Microsoft Internet Explorer	Version 5.0.1 sp1
Microsoft Internet Explorer	Version 5.0.1 sp2
Microsoft Internet Explorer	Version 5.0.1 sp3
Microsoft Internet Explorer	Version 5.0.1 sp4
Microsoft Internet Explorer	Version 6.0

Configuration B

25 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2003 Server	Version datacenter_edition
Microsoft Windows 2003 Server	Version datacenter_edition sp1
Microsoft Windows 2003 Server	Version datacenter_edition_64-bit
Microsoft Windows 2003 Server	Version datacenter_edition_64-bit sp1
Microsoft Windows 2003 Server	Version enterprise_64-bit
Microsoft Windows 2003 Server	Version enterprise_edition sp1
Microsoft Windows 2003 Server	Version enterprise_edition_64-bit
Microsoft Windows 2003 Server	Version enterprise_edition_64-bit sp1
Microsoft Windows 2003 Server	Version r2
Microsoft Windows 2003 Server	Version sp1
Microsoft Windows 2003 Server	Version standard
Microsoft Windows 2003 Server	Version standard sp1
Microsoft Windows 2003 Server	Version standard_64-bit
Microsoft Windows 2003 Server	Version web
Microsoft Windows 2003 Server	Version web sp1
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions

References (30)

http://secunia.com/advisories/20605

Source: secure@microsoft.com

Vendor Advisory

http://securitytracker.com/id?1016292

Source: secure@microsoft.com

http://www.idefense.com/intelligence/vulnerabilities/display.php?id=407

Source: secure@microsoft.com

http://www.kb.cert.org/vuls/id/923236

Source: secure@microsoft.com

PatchUS Government Resource

http://www.osvdb.org/26432

Source: secure@microsoft.com

http://www.securityfocus.com/bid/18394

Source: secure@microsoft.com

Patch

http://www.us-cert.gov/cas/techalerts/TA06-164A.html

Source: secure@microsoft.com

US Government Resource

http://www.vupen.com/english/advisories/2006/2320

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-022

Source: secure@microsoft.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/26809

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1590

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1640

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1668

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1756

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1866

Source: secure@microsoft.com

http://secunia.com/advisories/20605

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1016292

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.idefense.com/intelligence/vulnerabilities/display.php?id=407

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/923236

Source: af854a3a-2127-422b-91ae-364da2661108

PatchUS Government Resource

http://www.osvdb.org/26432

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/18394

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.us-cert.gov/cas/techalerts/TA06-164A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2006/2320

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-022

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/26809

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1590

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1640

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1668

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1756

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1866

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.