CVE-2006-1827 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2006-1827
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-1827

Description: Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length.

CVE Status: Candidate

References: SUSE http://www.novell.com/linux/security/advisories/2006_04_28.html SAID Secunia Advisory: SA19872 Secunia Advisory: SA19800 Secunia Advisory: SA19897 MISC http://www.cipher.org.uk/index.php?p=advisories/Asterisk_Codec_Integer_Overflow_07-04-2006.advisory DEBIAN http://www.debian.org/security/2006/dsa-1048 CONFIRM http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.7-patch.gz BID 17561

Return to the previous page.