CVE-2006-1550
Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0...
Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid (1) color index, (2) number of points, or (3) depth.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid (1) color index, (2) number of points, or (3) depth.
- Record
CVE-2006-1550- CVSS 2.0
- 7.6 High
AV:N/AC:H/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid (1) color index, (2) number of points, or (3) depth.
- Record
CVE-2006-1550- Updated
- 2026-11-02
EUVDEUVD-2006-1551 No score
Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid (1) color index, (2) number of points, or (3) depth.
- Record
EUVD-2006-1551- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qq7h-p864-fw93 No score
Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0...
Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid (1) color index, (2) number of points, or (3) depth.
- Record
GHSA-qq7h-p864-fw93- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid (1) color index, (2) number of points, or (3) depth.
- Record
CVE-2006-1550- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-1550 No score
Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid (1) color index, (2) number of points, or (3) depth.
- Record
DEBIAN-CVE-2006-1550- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
diaDebian:12 |
before 0.94.0-18 | 0.94.0-18 |
diaDebian:13 |
before 0.94.0-18 | 0.94.0-18 |
diaDebian:14 |
before 0.94.0-18 | 0.94.0-18 |
diaDebian:3.0 |
before 0.88.1-3woody1, plus listed versions 0.88.1-3 |
0.88.1-3woody1 |
diaDebian:3.1 |
before 0.94.0-7sarge3, plus listed versions 0.94.0-70.94.0-7sarge10.94.0-7sarge2 |
0.94.0-7sarge3 |
diaRed Hat:enterprise_linux:4::as |
before 1:0.94-5.4 | 1:0.94-5.4 |
dia-debuginfoRed Hat:enterprise_linux:4::as |
before 1:0.94-5.4 | 1:0.94-5.4 |
diaRed Hat:enterprise_linux:4::desktop |
before 1:0.94-5.4 | 1:0.94-5.4 |
dia-debuginfoRed Hat:enterprise_linux:4::desktop |
before 1:0.94-5.4 | 1:0.94-5.4 |
diaRed Hat:enterprise_linux:4::es |
before 1:0.94-5.4 | 1:0.94-5.4 |
dia-debuginfoRed Hat:enterprise_linux:4::es |
before 1:0.94-5.4 | 1:0.94-5.4 |
diaRed Hat:enterprise_linux:4::ws |
before 1:0.94-5.4 | 1:0.94-5.4 |
dia-debuginfoRed Hat:enterprise_linux:4::ws |
before 1:0.94-5.4 | 1:0.94-5.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-1550 is a high vulnerability (CVSS 7.6) in Dia, published March 30, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.47%, the 84th percentile. Fixed in dia 0.94.0-18.
References
mandriva.com/security/advisories?name=MDKSA-2006:062
redhat.com/support/errata/RHSA-2006-0280.html
mail.gnome.org/archives/dia-list/2006-March/msg00149.html
securityfocus.com/bid/17310
debian.org/security/2006/dsa-1025
secunia.com/advisories/19505
Show 25 moreShow less
securitytracker.com/id?1015853
gentoo.org/security/en/glsa/glsa-200604-14.xml
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10361
exchange.xforce.ibmcloud.com/vulnerabilities/25566
usn.ubuntu.com/266-1
novell.com/linux/security/advisories/2006_04_28.html
nvd.nist.gov/vuln/detail/CVE-2006-1550
github.com/advisories/GHSA-qq7h-p864-fw93
security-tracker.debian.org/tracker/CVE-2006-1550
access.redhat.com/errata/RHSA-2006:0280
bugzilla.redhat.com/show_bug.cgi?id=187401
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0280.json
cve.org/CVERecord?id=CVE-2006-1550