CVE-2006-1827
Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers...
Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length.
Exploit likelihood
What each source reports
NVD Score used
Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length.
- Record
CVE-2006-1827- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length.
- Record
CVE-2006-1827- Updated
- 2026-11-02
EUVDEUVD-2006-1827 No score
Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length.
- Record
EUVD-2006-1827- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3jff-hq38-gfvf No score
Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers...
Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length.
- Record
GHSA-3jff-hq38-gfvf- Updated
- 2026-11-02
OSV No score
Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length.
- Record
CVE-2006-1827- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-1827 No score
Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length.
- Record
DEBIAN-CVE-2006-1827- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
asteriskDebian:14 |
before 1:1.2.7.1.dfsg-1, plus listed versions 0.1.11-30.1.11-3woody11:1.0.5-21:1.0.5-41:1.0.6-1 Show 38 moreShow less1:1.0.6-21:1.0.7-11:1.0.7.dfsg.1-11:1.0.7.dfsg.1-21:1.0.7.dfsg.1-2sarge11:1.0.7.dfsg.1-2sarge21:1.0.7.dfsg.1-2sarge31:1.0.7.dfsg.1-2sarge41:1.0.7.dfsg.1-2sarge51:1.0.7.dfsg.1-2sarge61:1.0.9.dfsg-11:1.0.9.dfsg-31:1.0.9.dfsg-41:1.0.9.dfsg-51:1.0.9.dfsg-61:1.2.0-beta1.dfsg-11:1.2.0-beta2.dfsg-11:1.2.0-beta2.dfsg-21:1.2.0-beta2.dfsg-31:1.2.0-rc1.dfsg-11:1.2.0-rc2.dfsg-11:1.2.0.dfsg-11:1.2.0.dfsg-21:1.2.0.dfsg-31:1.2.0.dfsg-41:1.2.0.dfsg-51:1.2.0.dfsg-61:1.2.1.dfsg-11:1.2.1.dfsg-21:1.2.1.dfsg-31:1.2.4.dfsg-11:1.2.4.dfsg-21:1.2.4.dfsg-31:1.2.4.dfsg-41:1.2.4.dfsg-51:1.2.4.dfsg-61:1.2.4.dfsg-6+b11:1.2.4.dfsg-7 |
1:1.2.7.1.dfsg-1 |
asteriskDebian:3.0 From an advisory covering 2 CVEs |
before 0.1.11-3woody1, plus listed versions 0.1.11-3 |
0.1.11-3woody1 |
asteriskDebian:3.1 From an advisory covering 2 CVEs |
before 1:1.0.7.dfsg.1-2sarge2, plus listed versions 1:1.0.7.dfsg.1-21:1.0.7.dfsg.1-2sarge1 |
1:1.0.7.dfsg.1-2sarge2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1827 is a medium vulnerability (CVSS 6.4) in Digium Asterisk, published April 18, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.03%, the 94th percentile. Fixed in asterisk 1:1.2.7.1.dfsg-1.