CVE-2006-2378: Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers…

Unscored severity · published Jun 13, 2006

CVE-2006-2378

Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers…

–

CVSS

34.8%

EPSS

On KEV

Description

Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption.

Exploitation

Is it being used?

Exploit prediction (EPSS)34.8% · higher than 98% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

IE · Microsoft

6.0 · source: NVD

Internet Explorer · Microsoft

5.0.1; 5.0.1; 5.0.1; 5.0.1; 5.0.1; 6.0 · source: NVD

Windows 2003 Server · Microsoft

datacenter_edition; datacenter_edition; datacenter_edition_64-bit; datacenter_edition_64-bit; enterprise_64-bit; enterprise_edition; +9 more · source: NVD

Windows XP · Microsoft

All versions, or not specified · source: NVD

Affected product

Microsoft

All IE CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2006-2378

CVE.org

https://www.cve.org/CVERecord?id=CVE-2006-2378

Vendor Advisory

http://secunia.com/advisories/20605