CVEvulnerability
CVE-2006-2378
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-06-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption.
Affected configurations
• microsoft ie 6.0
• microsoft internet explorer 5.0.1
• microsoft internet explorer 6.0
• microsoft windows 2003 server datacenter edition
• microsoft windows 2003 server datacenter edition 64-bit
• microsoft windows 2003 server enterprise 64-bit
• microsoft windows 2003 server enterprise edition
• microsoft windows 2003 server enterprise edition 64-bit
• microsoft windows 2003 server r2
• microsoft windows 2003 server sp1
• microsoft windows 2003 server standard
• microsoft windows 2003 server standard 64-bit
• microsoft windows 2003 server web
• microsoft windows xp
References
- http://secunia.com/advisories/20605 Vendor Advisory
- http://securitytracker.com/id?1016292 securitytracker.com
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=407 www.idefense.com
- http://www.kb.cert.org/vuls/id/923236 Patch, US Government Resource
- http://www.osvdb.org/26432 www.osvdb.org
- http://www.securityfocus.com/bid/18394 Patch
- http://www.us-cert.gov/cas/techalerts/TA06-164A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/2320 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-022 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26809 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1590 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1640 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1668 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1756 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1866 oval.cisecurity.org
- http://secunia.com/advisories/20605 Vendor Advisory
- http://securitytracker.com/id?1016292 securitytracker.com
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=407 www.idefense.com
- http://www.kb.cert.org/vuls/id/923236 Patch, US Government Resource
- http://www.osvdb.org/26432 www.osvdb.org
- http://www.securityfocus.com/bid/18394 Patch
- http://www.us-cert.gov/cas/techalerts/TA06-164A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/2320 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-022 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26809 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1590 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1640 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1668 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1756 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1866 oval.cisecurity.org