Several format string vulnerabilities have been discovered in dia. By tricking a user into opening a specially crafted dia file, or a file with a specially crafted name, this could be exploited to execute arbitrary code with the user's privileges.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated Dia packages that fix several buffer overflow bugs are now available.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The Dia drawing program is designed to draw various types of diagrams.

Several format string flaws were found in the way dia displays certain messages. If an attacker is able to trick a Dia user into opening a carefully crafted file, it may be possible to execute arbitrary code as the user running Dia. (CVE-2006-2453, CVE-2006-2480)

Users of Dia should update to these erratum packages, which contain backported patches and are not vulnerable to these issues.

この更新では、CVE-2006-1550、CVE-2006-2453、CVE-2006-2480 が修正されます。

注意：Tenable Network Security は、前述の記述ブロックを Fedora セキュリティアドバイザリから直接抽出しています。Tenable では、できる限り新たな問題を持ち込まないように、自動的に整理して書式設定するようにしています。

此更新可修正 CVE-2006-1550、CVE-2006-2453、CVE-2006-2480

請注意，Tenable Network Security 已直接從 Fedora 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

此更新修复了 CVE-2006-1550、CVE-2006-2453、CVE-2006-2480

请注意，Tenable Network Security 已直接从 Fedora 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动整理和排版。

This update fixes CVE-2006-1550, CVE-2006-2453, CVE-2006-2480

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Format string bugs in dia could potentially be exploited to execute arbitrary code (CVE-2006-2453, CVE-2006-2480).

A format string vulnerability in Dia allows user-complicit attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a command line argument, but there are other mechanisms inputs that are automatically process by Dia, such as a crafted .dia file. (CVE-2006-2480)

Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480. (CVE-2006-2453)

Packages have been patched to correct this issue.

The remote host is affected by the vulnerability described in GLSA-200606-03 (Dia: Format string vulnerabilities)

    KaDaL-X discovered a format string error within the handling of     filenames. Hans de Goede also discovered several other format     string errors in the processing of dia files.
  Impact :

    By enticing a user to open a specially crafted file, a remote     attacker could exploit these vulnerabilities to execute arbitrary code     with the rights of the user running the application.
  Workaround :

    There is no known workaround at this time.

CVE-2006-2480/CVE-2006-2453 Dia format string issues

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
21604	Ubuntu 5.04 / 5.10 : dia vulnerabilities (USN-286-1)	Nessus	Ubuntu Local Security Checks	2006/5/27	2021/1/19	high
21638	RHEL 4 : dia (RHSA-2006:0541)	Nessus	Red Hat Local Security Checks	2006/6/5	2021/1/14	high
62280	Fedora Extras 5：dia-0.95-3	Nessus	Fedora Local Security Checks	2012/9/24	2021/1/11	high
62280	Fedora Extras 5 : dia-0.95-3	Nessus	Fedora Local Security Checks	2012/9/24	2021/1/11	high
62280	Fedora Extras 5：dia-0.95-3	Nessus	Fedora Local Security Checks	2012/9/24	2021/1/11	high
62280	Fedora Extras 5 : dia-0.95-3	Nessus	Fedora Local Security Checks	2012/9/24	2021/1/11	high
27198	openSUSE 10 Security Update : dia (dia-1435)	Nessus	SuSE Local Security Checks	2007/10/17	2021/1/14	high
21998	CentOS 4 : dia (CESA-2006:0541)	Nessus	CentOS Local Security Checks	2006/7/5	2021/1/4	high
21617	Mandrake Linux Security Advisory : dia (MDKSA-2006:093)	Nessus	Mandriva Local Security Checks	2006/5/31	2021/1/6	high
21665	GLSA-200606-03 : Dia: Format string vulnerabilities	Nessus	Gentoo Local Security Checks	2006/6/8	2021/1/6	high
24113	Fedora Core 4 : dia-0.94-16.fc4 (2006-580)	Nessus	Fedora Local Security Checks	2007/1/17	2021/1/11	high

検出

プラグインの検索

high

high

high

high

high

high

high

high

high

high

high