CVE-2006-1550

Severity: high (CVSS 7.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-03-30 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid (1) color index, (2) number of points, or (3) depth.

Affected products

Dia: 0.87, 0.88.1, 0.91, 0.92.2, 0.93, 0.94

References

http://mail.gnome.org/archives/dia-list/2006-March/msg00149.html
http://secunia.com/advisories/19469
http://secunia.com/advisories/19505
http://secunia.com/advisories/19507
http://secunia.com/advisories/19543
http://secunia.com/advisories/19546
http://secunia.com/advisories/19765
http://secunia.com/advisories/19897
http://secunia.com/advisories/19959
http://securitytracker.com/id?1015853
http://www.debian.org/security/2006/dsa-1025
http://www.gentoo.org/security/en/glsa/glsa-200604-14.xml

Get alerted when CVE-2006-1550 or the next vulnerability affects your stack