Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2006-2378

Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption.

Published

2006-06-13T19:06:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.8 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application microsoft ie 6.0 Yes
Application microsoft internet_explorer 5.0.1 Yes
Application microsoft internet_explorer 5.0.1 Yes
Application microsoft internet_explorer 5.0.1 Yes
Application microsoft internet_explorer 5.0.1 Yes
Application microsoft internet_explorer 5.0.1 Yes
Application microsoft internet_explorer 6.0 Yes
Operating System microsoft windows_2003_server datacenter_edition Yes
Operating System microsoft windows_2003_server datacenter_edition Yes
Operating System microsoft windows_2003_server datacenter_edition_64-bit Yes
Operating System microsoft windows_2003_server datacenter_edition_64-bit Yes
Operating System microsoft windows_2003_server enterprise_64-bit Yes
Operating System microsoft windows_2003_server enterprise_edition Yes
Operating System microsoft windows_2003_server enterprise_edition_64-bit Yes
Operating System microsoft windows_2003_server enterprise_edition_64-bit Yes
Operating System microsoft windows_2003_server r2 Yes
Operating System microsoft windows_2003_server sp1 Yes
Operating System microsoft windows_2003_server standard Yes
Operating System microsoft windows_2003_server standard Yes
Operating System microsoft windows_2003_server standard_64-bit Yes
Operating System microsoft windows_2003_server web Yes
Operating System microsoft windows_2003_server web Yes
Operating System microsoft windows_xp * Yes
Operating System microsoft windows_xp * Yes
Operating System microsoft windows_xp * Yes
Operating System microsoft windows_xp * Yes
Operating System microsoft windows_xp * Yes
Operating System microsoft windows_xp * Yes
Operating System microsoft windows_xp * Yes
Operating System microsoft windows_xp * Yes
Operating System microsoft windows_xp * Yes
Operating System microsoft windows_xp * Yes
References