RHSA-2006:0280

Vulnerability from csaf_redhat - Published: 2006-05-03 16:01 - Updated: 2026-01-13 22:35
Summary
Red Hat Security Advisory: dia security update

Notes

Topic
An updated Dia package that fixes several buffer overflow bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team.
Details
The Dia drawing program is designed to draw various types of diagrams. infamous41md discovered three buffer overflow bugs in Dia's xfig file format importer. If an attacker is able to trick a Dia user into opening a carefully crafted xfig file, it may be possible to execute arbitrary code as the user running Dia. (CVE-2006-1550) Users of Dia should update to these erratum packages, which contain backported patches and are not vulnerable to these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated Dia package that fixes several buffer overflow bugs are now\navailable.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Dia drawing program is designed to draw various types of diagrams.\n\ninfamous41md discovered three buffer overflow bugs in Dia\u0027s xfig file\nformat importer. If an attacker is able to trick a Dia user into opening a\ncarefully crafted xfig file, it may be possible to execute arbitrary code\nas the user running Dia. (CVE-2006-1550)\n\nUsers of Dia should update to these erratum packages, which contain\nbackported patches and are not vulnerable to these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2006:0280",
        "url": "https://access.redhat.com/errata/RHSA-2006:0280"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "187401",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=187401"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0280.json"
      }
    ],
    "title": "Red Hat Security Advisory: dia security update",
    "tracking": {
      "current_release_date": "2026-01-13T22:35:15+00:00",
      "generator": {
        "date": "2026-01-13T22:35:15+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.15"
        }
      },
      "id": "RHSA-2006:0280",
      "initial_release_date": "2006-05-03T16:01:00+00:00",
      "revision_history": [
        {
          "date": "2006-05-03T16:01:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2006-05-03T00:00:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-01-13T22:35:15+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 4",
                  "product_id": "4AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop version 4",
                  "product_id": "4Desktop",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 4",
                  "product_id": "4ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 4",
                  "product_id": "4WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dia-debuginfo-1:0.94-5.4.ia64",
                "product": {
                  "name": "dia-debuginfo-1:0.94-5.4.ia64",
                  "product_id": "dia-debuginfo-1:0.94-5.4.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dia-debuginfo@0.94-5.4?arch=ia64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dia-1:0.94-5.4.ia64",
                "product": {
                  "name": "dia-1:0.94-5.4.ia64",
                  "product_id": "dia-1:0.94-5.4.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dia@0.94-5.4?arch=ia64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dia-debuginfo-1:0.94-5.4.x86_64",
                "product": {
                  "name": "dia-debuginfo-1:0.94-5.4.x86_64",
                  "product_id": "dia-debuginfo-1:0.94-5.4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dia-debuginfo@0.94-5.4?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dia-1:0.94-5.4.x86_64",
                "product": {
                  "name": "dia-1:0.94-5.4.x86_64",
                  "product_id": "dia-1:0.94-5.4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dia@0.94-5.4?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dia-debuginfo-1:0.94-5.4.i386",
                "product": {
                  "name": "dia-debuginfo-1:0.94-5.4.i386",
                  "product_id": "dia-debuginfo-1:0.94-5.4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dia-debuginfo@0.94-5.4?arch=i386\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dia-1:0.94-5.4.i386",
                "product": {
                  "name": "dia-1:0.94-5.4.i386",
                  "product_id": "dia-1:0.94-5.4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dia@0.94-5.4?arch=i386\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dia-1:0.94-5.4.src",
                "product": {
                  "name": "dia-1:0.94-5.4.src",
                  "product_id": "dia-1:0.94-5.4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dia@0.94-5.4?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dia-debuginfo-1:0.94-5.4.ppc",
                "product": {
                  "name": "dia-debuginfo-1:0.94-5.4.ppc",
                  "product_id": "dia-debuginfo-1:0.94-5.4.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dia-debuginfo@0.94-5.4?arch=ppc\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dia-1:0.94-5.4.ppc",
                "product": {
                  "name": "dia-1:0.94-5.4.ppc",
                  "product_id": "dia-1:0.94-5.4.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dia@0.94-5.4?arch=ppc\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dia-debuginfo-1:0.94-5.4.s390x",
                "product": {
                  "name": "dia-debuginfo-1:0.94-5.4.s390x",
                  "product_id": "dia-debuginfo-1:0.94-5.4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dia-debuginfo@0.94-5.4?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dia-1:0.94-5.4.s390x",
                "product": {
                  "name": "dia-1:0.94-5.4.s390x",
                  "product_id": "dia-1:0.94-5.4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dia@0.94-5.4?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dia-debuginfo-1:0.94-5.4.s390",
                "product": {
                  "name": "dia-debuginfo-1:0.94-5.4.s390",
                  "product_id": "dia-debuginfo-1:0.94-5.4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dia-debuginfo@0.94-5.4?arch=s390\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "dia-1:0.94-5.4.s390",
                "product": {
                  "name": "dia-1:0.94-5.4.s390",
                  "product_id": "dia-1:0.94-5.4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dia@0.94-5.4?arch=s390\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:dia-1:0.94-5.4.i386"
        },
        "product_reference": "dia-1:0.94-5.4.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:dia-1:0.94-5.4.ia64"
        },
        "product_reference": "dia-1:0.94-5.4.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:dia-1:0.94-5.4.ppc"
        },
        "product_reference": "dia-1:0.94-5.4.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:dia-1:0.94-5.4.s390"
        },
        "product_reference": "dia-1:0.94-5.4.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:dia-1:0.94-5.4.s390x"
        },
        "product_reference": "dia-1:0.94-5.4.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.src as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:dia-1:0.94-5.4.src"
        },
        "product_reference": "dia-1:0.94-5.4.src",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:dia-1:0.94-5.4.x86_64"
        },
        "product_reference": "dia-1:0.94-5.4.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:dia-debuginfo-1:0.94-5.4.i386"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:dia-debuginfo-1:0.94-5.4.ia64"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:dia-debuginfo-1:0.94-5.4.ppc"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:dia-debuginfo-1:0.94-5.4.s390"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:dia-debuginfo-1:0.94-5.4.s390x"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:dia-debuginfo-1:0.94-5.4.x86_64"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:dia-1:0.94-5.4.i386"
        },
        "product_reference": "dia-1:0.94-5.4.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:dia-1:0.94-5.4.ia64"
        },
        "product_reference": "dia-1:0.94-5.4.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:dia-1:0.94-5.4.ppc"
        },
        "product_reference": "dia-1:0.94-5.4.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:dia-1:0.94-5.4.s390"
        },
        "product_reference": "dia-1:0.94-5.4.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:dia-1:0.94-5.4.s390x"
        },
        "product_reference": "dia-1:0.94-5.4.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.src as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:dia-1:0.94-5.4.src"
        },
        "product_reference": "dia-1:0.94-5.4.src",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:dia-1:0.94-5.4.x86_64"
        },
        "product_reference": "dia-1:0.94-5.4.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:dia-debuginfo-1:0.94-5.4.i386"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:dia-debuginfo-1:0.94-5.4.ia64"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:dia-debuginfo-1:0.94-5.4.ppc"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:dia-debuginfo-1:0.94-5.4.s390"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:dia-debuginfo-1:0.94-5.4.s390x"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:dia-debuginfo-1:0.94-5.4.x86_64"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:dia-1:0.94-5.4.i386"
        },
        "product_reference": "dia-1:0.94-5.4.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:dia-1:0.94-5.4.ia64"
        },
        "product_reference": "dia-1:0.94-5.4.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:dia-1:0.94-5.4.ppc"
        },
        "product_reference": "dia-1:0.94-5.4.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:dia-1:0.94-5.4.s390"
        },
        "product_reference": "dia-1:0.94-5.4.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:dia-1:0.94-5.4.s390x"
        },
        "product_reference": "dia-1:0.94-5.4.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.src as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:dia-1:0.94-5.4.src"
        },
        "product_reference": "dia-1:0.94-5.4.src",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:dia-1:0.94-5.4.x86_64"
        },
        "product_reference": "dia-1:0.94-5.4.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:dia-debuginfo-1:0.94-5.4.i386"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:dia-debuginfo-1:0.94-5.4.ia64"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:dia-debuginfo-1:0.94-5.4.ppc"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:dia-debuginfo-1:0.94-5.4.s390"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:dia-debuginfo-1:0.94-5.4.s390x"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:dia-debuginfo-1:0.94-5.4.x86_64"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:dia-1:0.94-5.4.i386"
        },
        "product_reference": "dia-1:0.94-5.4.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:dia-1:0.94-5.4.ia64"
        },
        "product_reference": "dia-1:0.94-5.4.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:dia-1:0.94-5.4.ppc"
        },
        "product_reference": "dia-1:0.94-5.4.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:dia-1:0.94-5.4.s390"
        },
        "product_reference": "dia-1:0.94-5.4.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:dia-1:0.94-5.4.s390x"
        },
        "product_reference": "dia-1:0.94-5.4.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.src as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:dia-1:0.94-5.4.src"
        },
        "product_reference": "dia-1:0.94-5.4.src",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-1:0.94-5.4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:dia-1:0.94-5.4.x86_64"
        },
        "product_reference": "dia-1:0.94-5.4.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:dia-debuginfo-1:0.94-5.4.i386"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:dia-debuginfo-1:0.94-5.4.ia64"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:dia-debuginfo-1:0.94-5.4.ppc"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:dia-debuginfo-1:0.94-5.4.s390"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:dia-debuginfo-1:0.94-5.4.s390x"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dia-debuginfo-1:0.94-5.4.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:dia-debuginfo-1:0.94-5.4.x86_64"
        },
        "product_reference": "dia-debuginfo-1:0.94-5.4.x86_64",
        "relates_to_product_reference": "4WS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2006-1550",
      "discovery_date": "2006-03-29T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "187556"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid (1) color index, (2) number of points, or (3) depth.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Dia multiple buffer overflows",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:dia-1:0.94-5.4.i386",
          "4AS:dia-1:0.94-5.4.ia64",
          "4AS:dia-1:0.94-5.4.ppc",
          "4AS:dia-1:0.94-5.4.s390",
          "4AS:dia-1:0.94-5.4.s390x",
          "4AS:dia-1:0.94-5.4.src",
          "4AS:dia-1:0.94-5.4.x86_64",
          "4AS:dia-debuginfo-1:0.94-5.4.i386",
          "4AS:dia-debuginfo-1:0.94-5.4.ia64",
          "4AS:dia-debuginfo-1:0.94-5.4.ppc",
          "4AS:dia-debuginfo-1:0.94-5.4.s390",
          "4AS:dia-debuginfo-1:0.94-5.4.s390x",
          "4AS:dia-debuginfo-1:0.94-5.4.x86_64",
          "4Desktop:dia-1:0.94-5.4.i386",
          "4Desktop:dia-1:0.94-5.4.ia64",
          "4Desktop:dia-1:0.94-5.4.ppc",
          "4Desktop:dia-1:0.94-5.4.s390",
          "4Desktop:dia-1:0.94-5.4.s390x",
          "4Desktop:dia-1:0.94-5.4.src",
          "4Desktop:dia-1:0.94-5.4.x86_64",
          "4Desktop:dia-debuginfo-1:0.94-5.4.i386",
          "4Desktop:dia-debuginfo-1:0.94-5.4.ia64",
          "4Desktop:dia-debuginfo-1:0.94-5.4.ppc",
          "4Desktop:dia-debuginfo-1:0.94-5.4.s390",
          "4Desktop:dia-debuginfo-1:0.94-5.4.s390x",
          "4Desktop:dia-debuginfo-1:0.94-5.4.x86_64",
          "4ES:dia-1:0.94-5.4.i386",
          "4ES:dia-1:0.94-5.4.ia64",
          "4ES:dia-1:0.94-5.4.ppc",
          "4ES:dia-1:0.94-5.4.s390",
          "4ES:dia-1:0.94-5.4.s390x",
          "4ES:dia-1:0.94-5.4.src",
          "4ES:dia-1:0.94-5.4.x86_64",
          "4ES:dia-debuginfo-1:0.94-5.4.i386",
          "4ES:dia-debuginfo-1:0.94-5.4.ia64",
          "4ES:dia-debuginfo-1:0.94-5.4.ppc",
          "4ES:dia-debuginfo-1:0.94-5.4.s390",
          "4ES:dia-debuginfo-1:0.94-5.4.s390x",
          "4ES:dia-debuginfo-1:0.94-5.4.x86_64",
          "4WS:dia-1:0.94-5.4.i386",
          "4WS:dia-1:0.94-5.4.ia64",
          "4WS:dia-1:0.94-5.4.ppc",
          "4WS:dia-1:0.94-5.4.s390",
          "4WS:dia-1:0.94-5.4.s390x",
          "4WS:dia-1:0.94-5.4.src",
          "4WS:dia-1:0.94-5.4.x86_64",
          "4WS:dia-debuginfo-1:0.94-5.4.i386",
          "4WS:dia-debuginfo-1:0.94-5.4.ia64",
          "4WS:dia-debuginfo-1:0.94-5.4.ppc",
          "4WS:dia-debuginfo-1:0.94-5.4.s390",
          "4WS:dia-debuginfo-1:0.94-5.4.s390x",
          "4WS:dia-debuginfo-1:0.94-5.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-1550"
        },
        {
          "category": "external",
          "summary": "RHBZ#187556",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=187556"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-1550",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-1550"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-1550",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-1550"
        }
      ],
      "release_date": "2006-03-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-05-03T16:01:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:dia-1:0.94-5.4.i386",
            "4AS:dia-1:0.94-5.4.ia64",
            "4AS:dia-1:0.94-5.4.ppc",
            "4AS:dia-1:0.94-5.4.s390",
            "4AS:dia-1:0.94-5.4.s390x",
            "4AS:dia-1:0.94-5.4.src",
            "4AS:dia-1:0.94-5.4.x86_64",
            "4AS:dia-debuginfo-1:0.94-5.4.i386",
            "4AS:dia-debuginfo-1:0.94-5.4.ia64",
            "4AS:dia-debuginfo-1:0.94-5.4.ppc",
            "4AS:dia-debuginfo-1:0.94-5.4.s390",
            "4AS:dia-debuginfo-1:0.94-5.4.s390x",
            "4AS:dia-debuginfo-1:0.94-5.4.x86_64",
            "4Desktop:dia-1:0.94-5.4.i386",
            "4Desktop:dia-1:0.94-5.4.ia64",
            "4Desktop:dia-1:0.94-5.4.ppc",
            "4Desktop:dia-1:0.94-5.4.s390",
            "4Desktop:dia-1:0.94-5.4.s390x",
            "4Desktop:dia-1:0.94-5.4.src",
            "4Desktop:dia-1:0.94-5.4.x86_64",
            "4Desktop:dia-debuginfo-1:0.94-5.4.i386",
            "4Desktop:dia-debuginfo-1:0.94-5.4.ia64",
            "4Desktop:dia-debuginfo-1:0.94-5.4.ppc",
            "4Desktop:dia-debuginfo-1:0.94-5.4.s390",
            "4Desktop:dia-debuginfo-1:0.94-5.4.s390x",
            "4Desktop:dia-debuginfo-1:0.94-5.4.x86_64",
            "4ES:dia-1:0.94-5.4.i386",
            "4ES:dia-1:0.94-5.4.ia64",
            "4ES:dia-1:0.94-5.4.ppc",
            "4ES:dia-1:0.94-5.4.s390",
            "4ES:dia-1:0.94-5.4.s390x",
            "4ES:dia-1:0.94-5.4.src",
            "4ES:dia-1:0.94-5.4.x86_64",
            "4ES:dia-debuginfo-1:0.94-5.4.i386",
            "4ES:dia-debuginfo-1:0.94-5.4.ia64",
            "4ES:dia-debuginfo-1:0.94-5.4.ppc",
            "4ES:dia-debuginfo-1:0.94-5.4.s390",
            "4ES:dia-debuginfo-1:0.94-5.4.s390x",
            "4ES:dia-debuginfo-1:0.94-5.4.x86_64",
            "4WS:dia-1:0.94-5.4.i386",
            "4WS:dia-1:0.94-5.4.ia64",
            "4WS:dia-1:0.94-5.4.ppc",
            "4WS:dia-1:0.94-5.4.s390",
            "4WS:dia-1:0.94-5.4.s390x",
            "4WS:dia-1:0.94-5.4.src",
            "4WS:dia-1:0.94-5.4.x86_64",
            "4WS:dia-debuginfo-1:0.94-5.4.i386",
            "4WS:dia-debuginfo-1:0.94-5.4.ia64",
            "4WS:dia-debuginfo-1:0.94-5.4.ppc",
            "4WS:dia-debuginfo-1:0.94-5.4.s390",
            "4WS:dia-debuginfo-1:0.94-5.4.s390x",
            "4WS:dia-debuginfo-1:0.94-5.4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0280"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Dia multiple buffer overflows"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.