Vulnerability in N/a

CVE-2006-0143

Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a WMF file containing (1) ExtCreateRegion or (2) ExtEscape function calls with arguments with inconsisten…

EPSS: 0.726 (98.8th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

1015453 (vdb-entry, x_refsource_SECTRACK)
lostmon.blogspot.com/2007/08/windows-extended-file-attributes-buffer.html (x_refsource_MISC)
win-gre-wmf-dos(24044) (vdb-entry, x_refsource_XF)
16167 (vdb-entry, x_refsource_BID)
blogs.technet.com/msrc/archive/2006/01/09/417198.aspx (x_refsource_CONFIRM)
20060109 [UPDATE]Microsoft Windows GRE WMF Format Multiple Unauthorized Memory Access Vulnerabilities (mailing-list, x_refsource_BUGTRAQ)
20060107 Microsoft Windows GRE WMF Format Multiple Memory Overrun Vulnerabilities (mailing-list, x_refsource_BUGTRAQ)
ADV-2006-0115 (vdb-entry, x_refsource_VUPEN)