National Cyber-Alert System

Vulnerability Summary for CVE-2006-2378

Overview

Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#923236

Name: VU#923236

Type: Patch Information

Hyperlink:http://www.kb.cert.org/vuls/id/923236

US-CERT Technical Alert: TA06-164A

Name: TA06-164A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA06-164A.html

External Source: BID

Name: 18394

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/18394

External Source: XF

Name: win-art-image-bo(26809)

Hyperlink:http://xforce.iss.net/xforce/xfdb/26809

External Source: OSVDB

Name: 26432

Hyperlink:http://www.osvdb.org/26432

External Source: MS

Name: MS06-022

Hyperlink:http://www.microsoft.com/technet/security/bulletin/ms06-022.mspx

External Source: IDEFENSE

Name: 20060613 Microsoft Internet Explorer ART File Heap Corruption Vulnerability

Hyperlink:http://www.idefense.com/intelligence/vulnerabilities/display.php?id=407

External Source: VUPEN

Name: ADV-2006-2320

Type: Advisory

Hyperlink:http://www.frsirt.com/english/advisories/2006/2320

External Source: SECTRACK

Name: 1016292

Hyperlink:http://securitytracker.com/id?1016292

External Source: SECUNIA

Name: 20605

Type: Advisory

Hyperlink:http://secunia.com/advisories/20605

US Government Resource: oval:org.mitre.oval:def:1866

Name: oval:org.mitre.oval:def:1866

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1866

US Government Resource: oval:org.mitre.oval:def:1756

Name: oval:org.mitre.oval:def:1756

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1756

US Government Resource: oval:org.mitre.oval:def:1668

Name: oval:org.mitre.oval:def:1668

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1668

US Government Resource: oval:org.mitre.oval:def:1640

Name: oval:org.mitre.oval:def:1640

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1640

US Government Resource: oval:org.mitre.oval:def:1590

Name: oval:org.mitre.oval:def:1590

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1590