CVE Feed

    Dashboard / CVE / CVE-2006-2480

    CVE-2006-2480

    Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a command line argument, but there are other mechanisms for input that are automatically processed by Dia, such as a crafted .dia file.

    Published:May 10, 2004
    Last Modified:Apr 16, 2026
    EPS:May 19, 2006
    EPSS Score:0.22647
    CVSS Score:5.1

    Affected Products

    Vendor
    Dia
    Product
    Dia
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    http://bugzilla.gnome.org/show_bug.cgi?id=342111http://kandangjamur.net/tutorial/dia.txthttp://www.securityfocus.com/archive/82/433313/30/0/threadedhttp://bugzilla.gnome.org/show_bug.cgi?id=342111http://kandangjamur.net/tutorial/dia.txthttp://www.securityfocus.com/archive/82/433313/30/0/threadedhttps://www.exploit-db.com/exploits/27903

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-135 Format String Injection
    CAPEC-67 String Format Overflow in syslog()

    Related CVEs

    CVE-2025-15032 (CVSS 7.4) — Missing about:blank indicator in custom-sized new windows in Dia before 1.9.0 on macOS could allow an attacker…
    CVE-2008-5984 (CVSS 6.9) — Untrusted search path vulnerability in the Python plugin in Dia 0.96.1, and possibly other versions, allows lo…
    CVE-2007-3408 (CVSS 7.5) — Multiple unspecified vulnerabilities in Dia before 0.96.1-6 have unspecified attack vectors and impact, probab…
    CVE-2006-2453 (CVSS 7.5) — Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a differ…
    CVE-2006-1550 (CVSS 7.6) — Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow…
    CVE-2005-2966 (CVSS 5.1) — The Python SVG import plugin (diasvg_import.py) for DIA 0.94 and earlier allows user-assisted attackers to exe…

    References

    http://bugzilla.gnome.org/show_bug.cgi?id=342111
    http://kandangjamur.net/tutorial/dia.txt
    http://secunia.com/advisories/20199
    http://secunia.com/advisories/20254
    http://secunia.com/advisories/20339
    http://secunia.com/advisories/20422
    http://secunia.com/advisories/20457
    http://secunia.com/advisories/20513
    http://securitytracker.com/id?1016203
    http://www.gentoo.org/security/en/glsa/glsa-200606-03.xml
    http://www.mandriva.com/security/advisories?name=MDKSA-2006:093
    http://www.novell.com/linux/security/advisories/2006-06-02.html
    http://www.osvdb.org/25699
    http://www.redhat.com/support/errata/RHSA-2006-0541.html
    http://www.securityfocus.com/archive/82/433313/30/0/threaded
    http://www.securityfocus.com/bid/18078
    http://www.vupen.com/english/advisories/2006/1908
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11224
    https://usn.ubuntu.com/286-1/
    http://bugzilla.gnome.org/show_bug.cgi?id=342111
    http://kandangjamur.net/tutorial/dia.txt
    http://secunia.com/advisories/20199
    http://secunia.com/advisories/20254
    http://secunia.com/advisories/20339
    http://secunia.com/advisories/20422
    http://secunia.com/advisories/20457
    http://secunia.com/advisories/20513
    http://securitytracker.com/id?1016203
    http://www.gentoo.org/security/en/glsa/glsa-200606-03.xml
    http://www.mandriva.com/security/advisories?name=MDKSA-2006:093
    http://www.novell.com/linux/security/advisories/2006-06-02.html
    http://www.osvdb.org/25699
    http://www.redhat.com/support/errata/RHSA-2006-0541.html
    http://www.securityfocus.com/archive/82/433313/30/0/threaded
    http://www.securityfocus.com/bid/18078
    http://www.vupen.com/english/advisories/2006/1908
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11224
    https://usn.ubuntu.com/286-1/

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High