CVE-2006-1550

CVE-2006-1550 describes multiple buffer overflow vulnerabilities in the xfig import code of Dia versions 0.87 through 0.95-pre6. These flaws, specifically in xfig-import.c, can be triggered by user-assisted attackers through a specially crafted xfig file, potentially leading to an unknown but severe impact. The vulnerability has a CVSS score of 7.6 (High), indicating a network-based attack with high complexity, requiring no authentication, and potentially resulting in complete compromise of confidentiality, integrity, and availability. The EPSS score is low, suggesting a low probability of exploitation. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a lack of widespread attention.