CVE-2006-2378

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 34.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-06-13 · updated 2026-06-16

Description

Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption.

Affected products

Microsoft Ie: 6.0-sp1
Microsoft Internet Explorer 11: 5.0.1, 5.0.1-sp1, 5.0.1-sp2, 5.0.1-sp3, 5.0.1-sp4, 6.0
Microsoft Windows 2003 Server: datacenter_edition, datacenter_edition-sp1, datacenter_edition_64-bit, datacenter_edition_64-bit-sp1, enterprise_64-bit, enterprise_edition-sp1 (+9)
Microsoft Windows XP Service Pack 3: all versions

References

http://secunia.com/advisories/20605
http://securitytracker.com/id?1016292
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=407
http://www.kb.cert.org/vuls/id/923236
http://www.osvdb.org/26432
http://www.securityfocus.com/bid/18394
http://www.us-cert.gov/cas/techalerts/TA06-164A.html
http://www.vupen.com/english/advisories/2006/2320
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-022
https://exchange.xforce.ibmcloud.com/vulnerabilities/26809
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1590
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1640

Get alerted when CVE-2006-2378 or the next vulnerability affects your stack