Every CVE Search/ Get API key

CVE-2006-2480

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of...

5.1 MediumPublic exploitFix available

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a command line argument, but there are other mechanisms for input that are automatically processed by Dia, such as a crafted .dia file.

Exploit likelihood

7.81%Down 19.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.1

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a command line argument, but there are other mechanisms for input that are automatically processed by Dia, such as a crafted .dia file.

Record
CVE-2006-2480
CVSS 2.0
5.1 MediumAV:N/AC:H/Au:N/C:P/I:P/A:P
Weakness
CWE-134
Updated
2026-11-02
CVE List No score

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a command line argument, but there are other mechanisms for input that are automatically processed by Dia, such as a crafted .dia file.

Record
CVE-2006-2480
Updated
2026-11-02
EUVDEUVD-2006-2480 No score

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a command line argument, but there are other mechanisms for input that are automatically processed by Dia, such as a crafted .dia file.

Record
EUVD-2006-2480
Updated
2026-11-03
GitHub AdvisoriesGHSA-prr8-97x3-2662 No score

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of...

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a command line argument, but there are other mechanisms for input that are automatically processed by Dia, such as a crafted .dia file.

Record
GHSA-prr8-97x3-2662
Weakness
CWE-134
Updated
2026-11-02
OSV No score

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a command line argument, but there are other mechanisms for input that are automatically processed by Dia, such as a crafted .dia file.

Record
CVE-2006-2480
Updated
2026-11-02
OSVDEBIAN-CVE-2006-2480 No score

Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a command line argument, but there are other mechanisms for input that are automatically processed by Dia, such as a crafted .dia file.

Record
DEBIAN-CVE-2006-2480
Updated
2026-11-02
OSVopenSUSE-SU-2024:10716-1 No score

dia-0.97.3-11.1 on GA media

These are all security issues fixed in the dia-0.97.3-11.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10716-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dia
Debian:12
 before 0.95.0-4
0.95.0-4
dia
Debian:13
 before 0.95.0-4
0.95.0-4
dia
Debian:14
 before 0.95.0-4
0.95.0-4
dia
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
 before 1:0.94-5.7.1
1:0.94-5.7.1
dia-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 2 CVEs
 before 1:0.94-5.7.1
1:0.94-5.7.1
dia
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
 before 1:0.94-5.7.1
1:0.94-5.7.1
dia-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 2 CVEs
 before 1:0.94-5.7.1
1:0.94-5.7.1
dia
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
 before 1:0.94-5.7.1
1:0.94-5.7.1
dia-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 2 CVEs
 before 1:0.94-5.7.1
1:0.94-5.7.1
dia
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
 before 1:0.94-5.7.1
1:0.94-5.7.1
dia-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 2 CVEs
 before 1:0.94-5.7.1
1:0.94-5.7.1
dia
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 0.97.3-11.1
0.97.3-11.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBDia 0.8x/0.9x - Filename Remote Format String2006-05-23

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-2480 is a medium vulnerability (CVSS 5.1) in Dia, published May 19, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.81%, the 94th percentile. Fixed in dia 0.95.0-4.

References

Show 29 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open