CVE-2006-2378

Severity

68%

Complexity

86%

Confidentiality

106%

Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption.

Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption.

CVSS 2.0 Base Score 6.8. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:P/A:P).

Overview

Type

Microsoft

First reported 18 years ago

2006-06-13 19:06:00

Last updated 6 years ago

2018-10-12 21:39:00

Affected Software

Microsoft Internet Explorer 5.0.1

5.0.1

Microsoft Internet Explorer 5.0.1 SP1

5.0.1

Microsoft Internet Explorer 5.0.1 SP2

5.0.1

Microsoft Internet Explorer 5.0.1 SP3

5.0.1

Microsoft Internet Explorer 5.0.1 Service Pack 4

5.0.1

Microsoft Internet Explorer 6.0

6.0

Microsoft Windows XP Professional Gold

Microsoft Windows XP Service Pack 1 Home Edition

Microsoft windows xp_sp1 media_center

Microsoft Windows XP Service Pack 2 Home Edition

Microsoft windows xp_sp2 media_center

Microsoft windows xp_sp2 tablet_pc

References

20605

Vendor Advisory

1016292

20060613 Microsoft Internet Explorer ART File Heap Corruption Vulnerability

VU#923236

Patch, US Government Resource

26432

18394

Patch

TA06-164A

US Government Resource

ADV-2006-2320

MS06-022

win-art-image-bo(26809)

oval:org.mitre.oval:def:1590

oval:org.mitre.oval:def:1640

oval:org.mitre.oval:def:1668

oval:org.mitre.oval:def:1756

oval:org.mitre.oval:def:1866

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.