PRIOn knowledge basePRION:CVE-2006-0020Integer overflow
6.8 Medium
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.02 Low
EPSS
Percentile
88.6%
An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millennium, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute code via a crafted WMF file with a manipulated WMF header size, possibly involving an integer overflow, a different vulnerability than CVE-2005-4560, and aka “WMF Image Parsing Memory Corruption Vulnerability.”
| CPE | Name | Operator | Version |
|---|---|---|---|
| windows_2003_server | eq | 1.0.0-sp | |
| windows_2003_server | eq | 2.0.114 |
References
linuxbox.org/pipermail/funsec/2006-January/002828.html
secunia.com/advisories/18729
secunia.com/advisories/18912
www.kb.cert.org/vuls/id/312956
www.microsoft.com/technet/security/advisory/913333.mspx
www.osvdb.org/22976
www.securityfocus.com/bid/16516
www.us-cert.gov/cas/techalerts/TA06-045A.html
www.vupen.com/english/advisories/2006/0469
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-004
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1638
Related
6.8 Medium
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.02 Low
EPSS
Percentile
88.6%