A local overflow exists in Microsoft Windows. The jgdw400.dll library fails to perform correct boundary checking on .ART files which can result in a buffer overflow. With a specially crafted request, an attacker can perform arbitrary code execution resulting in a loss of integrity.

Microsoft has released a patch to address this issue. Additionally, it is possible to correct the flaw by implementing the following workaround(s):

1. Click Start, click Run, type cmd, and then click OK.

2. Type the following commands at a command prompt. Make a note of the current files ACLs, including inheritance settings. You may need this list if you have to undo these modifications:

cacls %windir%\system32\jgdw400.dll
cacls %windir%\system32\jgpl400.dll

3. Type the following command at a command prompt to deny the 'everyone' group access to this file:

echo y|cacls %windir%\system32\jgdw400.dll /d everyone
echo y|cacls %windir%\system32\jgpl400.dll /d everyone

4. Close Internet Explorer, and reopen it for the changes to take effect.

• Bugtraq ID: 18394
• CVE ID: 2006-2378 (see also: NVD)
• Secunia Advisory ID: 20605
• SCIP VulDB ID: 2305
• Microsoft Knowledge Base Article: 918439
• CERT VU: 923236
• VUPEN Advisory: ADV-2006-2320
• Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-06/0224.html
• Other Advisory URL: http://idefense.com/intelligence/vulnerabilities/display.php?id=407
• Microsoft Security Bulletin: MS06-022

• Anonymous - iDefense Labs VCP