Red Hat Security AdvisoryRHSA-2006:0541
dia security update
Released 2006-06-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 dia-1:0.94-5.7.1, dia-1:0.94-5.7.1.i386, dia-1:0.94-5.7.1.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 dia-1:0.94-5.7.1, dia-1:0.94-5.7.1.i386
- Red Hat Enterprise Linux ES version 4 dia-1:0.94-5.7.1, dia-1:0.94-5.7.1.i386, dia-1:0.94-5.7.1.ia64
- Red Hat Enterprise Linux WS version 4 dia-1:0.94-5.7.1, dia-1:0.94-5.7.1.i386, dia-1:0.94-5.7.1.ia64
Fixes 2 records
Priority LOW 37
Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02241 · Published 2006-05-28 · Fixed CWE-134
Priority LOW 34
Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifie…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.07806 · Published 2006-05-19 · Fixed CWE-134
