CVE-2006-2480

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-05-19 · updated 2026-06-16
Weakness: CWE-134

Description

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a command line argument, but there are other mechanisms for input that are automatically processed by Dia, such as a crafted .dia file.

Affected products

Dia: 0.94

References

http://bugzilla.gnome.org/show_bug.cgi?id=342111
http://kandangjamur.net/tutorial/dia.txt
http://secunia.com/advisories/20199
http://secunia.com/advisories/20254
http://secunia.com/advisories/20339
http://secunia.com/advisories/20422
http://secunia.com/advisories/20457
http://secunia.com/advisories/20513
http://securitytracker.com/id?1016203
http://www.gentoo.org/security/en/glsa/glsa-200606-03.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2006:093
http://www.novell.com/linux/security/advisories/2006-06-02.html

Get alerted when CVE-2006-2480 or the next vulnerability affects your stack