Vulnerabilities > CVE-2006-0143 - Resource Management Errors vulnerability in Microsoft products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

microsoft

CWE-399

exploit available

NVD

Published: 2006-01-09

Updated: 2019-04-30

Summary

Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a WMF file containing (1) ExtCreateRegion or (2) ExtEscape function calls with arguments with inconsistent lengths.

Vulnerable Configurations

Part	Description	Count
OS	Microsoft Microsoft Windows 2000 * Microsoft Windows 2003 Server Datacenter_64-Bit Microsoft Windows 2003 Server Enterprise Microsoft Windows 2003 Server Enterprise_64-Bit Microsoft Windows 2003 Server R2 Microsoft Windows 2003 Server Standard Microsoft Windows 2003 Server Standard_64-Bit Microsoft Windows 2003 Server Web Microsoft Windows 98 * Microsoft Windows 98Se * Microsoft Windows ME * Microsoft Windows XP *	30

Common Weakness Enumeration (CWE)

CWE-399 - Resource Management Errors

Exploit-Db

description	Microsoft Windows Graphics Rendering Engine Multiple Memory Corruption Vulnerabilities. CVE-2006-0143. Dos exploit for windows platform
id	EDB-ID:27051
last seen	2016-02-03
modified	2006-01-09
published	2006-01-09
reporter	cocoruder
source	https://www.exploit-db.com/download/27051/
title	Microsoft Windows Graphics Rendering Engine Multiple Memory Corruption Vulnerabilities

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Exploit-Db

References