NVD

Id
61077  
Name
CVE-2006-2376  
Description
Integer overflow in the PolyPolygon function in Graphics Rendering Engine on Microsoft Windows 98 and Me allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) or EMF image with a sum of entries in the vertext counts array and number of polygons that triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-13  
Modified Date
2011-10-17  
Seq
2006-2376  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
315484 61077 CVE-2006-2376 1094  View
315485 61077 CVE-2006-2376 1016286  View
315486 61077 CVE-2006-2376 VU#909508  View
315487 61077 CVE-2006-2376 MS06-026  View
315488 61077 CVE-2006-2376 20060613 SYMSA-2006-004: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution  View
315489 61077 CVE-2006-2376 18322  View
315490 61077 CVE-2006-2376 TA06-164A  View
315491 61077 CVE-2006-2376 ADV-2006-2324  View
315492 61077 CVE-2006-2376 win-gre-wmf-code-execution(26815)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58143 JVNDB-2006-000339 Microsoft Windows の Graphics Rendering Engine におけるヒープオーバーフローの脆弱性 Microsoft Windows において、Graphics Rendering Engine の PolyPolygon 関数には、Windows メタファイル (WMF) の画像形式の処理が不適切であるため、ヒープオーバーフローが発生する脆弱性が存在します。 CVE-2006-2376 18478 CVE-2006-2376 61077 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000339.html 2006-06-13 2007-04-01 View