CVE-2006-2378 json
Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Wi…
published 2006-06-13 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-2379
- cvss
- 6.8
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 34.8%
- EPSS 34.8% chance of exploitation in 30 days, percentile 98%
- public exploits
- 0
- none known
Summary
Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption.
Patch / fix
- securityfocus.com/bid/18394 patch
- kb.cert.org/vuls/id/923236 advisory
Exploit prediction
34.79% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P |
References
-
kb.cert.org
/vuls/id/923236
third-party-advisory, patch, us-government-resource
-
securityfocus.com
/bid/18394
vdb-entry, patch
-
docs.microsoft.com
/en-us/security-updates/securitybulletins/2006/ms06-022
vendor-advisory
-
secunia.com
/advisories/20605
third-party-advisory, vendor-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/26809
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1640
vdb-entry, signature
-
osvdb.org
/26432
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1756
vdb-entry, signature
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1668
vdb-entry, signature
-
us-cert.gov
/cas/techalerts/TA06-164A.html
third-party-advisory, us-government-resource
-
idefense.com
/intelligence/vulnerabilities/display.php?id=407
third-party-advisory
-
vupen.com
/english/advisories/2006/2320
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1866
vdb-entry, signature
-
securitytracker.com
/id?1016292
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1590
vdb-entry, signature
Sources
- CVE List CVE-2006-2378
- NVD CVE-2006-2378
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.