NVD

Id
65240  
Name
CVE-2006-6696  
Description
Double free vulnerability in Microsoft Windows 2000, XP, 2003, and Vista allows local users to gain privileges by calling the MessageBox function with a MB_SERVICE_NOTIFICATION message with crafted data, which sends a HardError message to Client/Server Runtime Server Subsystem (CSRSS) process, which is not properly handled when invoking the UserHardError and GetHardErrorText functions in WINSRV.DLL.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-12-21  
Modified Date
2011-03-07  
Seq
2006-6696  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
340474 65240 CVE-2006-6696 http://blogs.technet.com/msrc/archive/2006/12/22/new-report-of-a-windows-vulnerability.aspx  View
340475 65240 CVE-2006-6696 http://groups.google.ca/group/microsoft.public.win32.programmer.kernel/browse_thread/thread/c5946bf40f227058/7bd7b5d66a4e5aff  View
340476 65240 CVE-2006-6696 http://isc.sans.org/diary.php?n&storyid=1965  View
340477 65240 CVE-2006-6696 20061221 Microsoft Windows XP/2003/Vista memory corruption 0day  View
340478 65240 CVE-2006-6696 2967  View
340479 65240 CVE-2006-6696 oval:org.mitre.oval:def:1816  View
340480 65240 CVE-2006-6696 http://research.eeye.com/html/alerts/zeroday/20061215.html  View
340481 65240 CVE-2006-6696 1017433  View
340482 65240 CVE-2006-6696 http://www.determina.com/security.research/vulnerabilities/csrss-harderror.html  View
340483 65240 CVE-2006-6696 http://www.kuban.ru/forum_new/forum2/files/19124.html  View
340484 65240 CVE-2006-6696 MS07-021  View
340485 65240 CVE-2006-6696 http://www.security.nnov.ru/files/messagebox.c  View
340486 65240 CVE-2006-6696 http://www.security.nnov.ru/Gnews944.html  View
340487 65240 CVE-2006-6696 20061221 Microsoft Windows XP/2003/Vista memory corruption 0day  View
340488 65240 CVE-2006-6696 20061221 Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memorycorruption 0day  View
340489 65240 CVE-2006-6696 20061221 Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day  View
340490 65240 CVE-2006-6696 20061222 Re: Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day  View
340491 65240 CVE-2006-6696 20061230 csrss.exe double-free vulnerability - arbitrary DWORD overwrite exploit  View
340492 65240 CVE-2006-6696 SSRT071365  View
340493 65240 CVE-2006-6696 21688  View
340494 65240 CVE-2006-6696 23324  View
340495 65240 CVE-2006-6696 ADV-2006-5120  View
340496 65240 CVE-2006-6696 ADV-2007-1325  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58680 JVNDB-2006-000945 Microsoft Windows の CSRSS における HardError エラーメッセージ処理によるメモリ二重解放の脆弱性 Microsoft Windows には、Client Server Runtime Subsystem (CSRSS) プロセスでの HardError エラーメッセージ処理の不備により、メモリの二重解放が発生する脆弱性が存在します。 CVE-2006-6696 22798 CVE-2006-6696 65240 9.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000945.html 2006-12-21 2007-05-10 View