CVE-2006-4071

Severity

26%

Complexity

49%

Confidentiality

48%

Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP, Server 2003, and possibly other versions, allows user-assisted attackers to cause a denial of service (application crash) via a crafted WMF file.

Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP, Server 2003, and possibly other versions, allows user-assisted attackers to cause a denial of service (application crash) via a crafted WMF file.

CVSS 2.0 Base Score 2.6. CVSS Attack Vector: network. CVSS Attack Complexity: high. CVSS Vector: (AV:N/AC:H/Au:N/C:N/I:N/A:P).

Overview

Type

Microsoft windows

First reported 18 years ago

2006-08-10 01:04:00

Last updated 6 years ago

2018-10-17 21:33:00

Affected Software

Microsoft windows xp_gold

Microsoft windows xp_sp1 tablet_pc

Microsoft windows xp_sp2 tablet_pc

References

http://determina.blogspot.com/2007/01/whats-wrong-with-wmf.html

20060806 0-day XP SP2 wmf exploit

Exploit

20060807 0-day XP SP2 wmf exploit (some details)

21377

Exploit, Vendor Advisory

1353

20060807 0-day XP SP2 wmf exploit (some details)

20060806 0-day XP SP2 wmf exploit

20070111 WMF CreateBrushIndirect vulnerability (DoS)

19365

21992

ADV-2006-3180

windows-wmf-gdi32-dos(28281)

3111

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.