CVE-2006-1827

Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a…

published April 18, 2006

CVSS
—
EPSS
7%
Percentile
94.2
In the wild
Unconfirmed
What it is

Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07031 · 94.2th percentile
Published
2006-04-18T20:00Z
EPSS history
Timeline
  • 18 APR 20:00Z
    Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a…
    cvelistv5