CVE-2006-0020

Severity

93%

Complexity

86%

Confidentiality

165%

An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millennium, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute code via a crafted WMF file with a manipulated WMF header size, possibly involving an integer overflow, a different vulnerability than CVE-2005-4560, and aka "WMF Image Parsing Memory Corruption Vulnerability."

An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millennium, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute code via a crafted WMF file with a manipulated WMF header size, possibly involving an integer overflow, a different vulnerability than CVE-2005-4560, and aka "WMF Image Parsing Memory Corruption Vulnerability."

CVSS 2.0 Base Score 9.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C).

Overview

Type

Microsoft

First reported 19 years ago

2006-01-10 21:03:00

Last updated 6 years ago

2018-10-12 21:38:00

Affected Software

Microsoft windows 98_gold

Microsoft windows 98_se

Microsoft Windows ME

Microsoft windows xp_sp1 tablet_pc

Microsoft windows xp_sp2 tablet_pc

References

[funsec] 20060110 Another WMF flaw without a Microsoft patch

Exploit, Vendor Advisory

18729

Patch, Vendor Advisory

18912

Vendor Advisory

VU#312956

Patch, Third Party Advisory, US Government Resource

http://www.microsoft.com/technet/security/advisory/913333.mspx

Vendor Advisory

22976

16516

Patch

TA06-045A

Third Party Advisory, US Government Resource

ADV-2006-0469

MS06-004

oval:org.mitre.oval:def:1638

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.