|
|
CVE Reference: CVE-2006-1827 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-1827 |
|
|
Description: Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length. |
|
|
CVE Status: Candidate |
|
|
References: SUSE http://www.novell.com/linux/security/advisories/2006_04_28.html SAID Secunia Advisory: SA19872 Secunia Advisory: SA19800 Secunia Advisory: SA19897 MISC http://www.cipher.org.uk/index.php?p=advisories/Asterisk_Codec_Integer_Overflow_07-04-2006.advisory DEBIAN http://www.debian.org/security/2006/dsa-1048 CONFIRM http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.7-patch.gz BID 17561 |
|
| Return to the previous page. |
