Code injection

2006-01-0920:03:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

High

0.945 High

EPSS

Percentile

99.2%

JSON

Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a WMF file containing (1) ExtCreateRegion or (2) ExtEscape function calls with arguments with inconsistent lengths.

CPENameOperatorVersion
windows_2003_servereqenterprise64bit
windows_2003_servereqstandard64bit
windows_2003_servereqdatacenter64bit sp1
windows_2003_servereqr2 sp1
windows_2003_servereqenterprise64bit sp1
windows_2003_servereq2.0.114
windows_2003_servereqweb sp1
windows_2003_servereqstandard sp1
windows_2003_servereqenterprise sp1
windows_2003_servereq2.0.114

Name	Operator	Version
windows_2003_server	eq	enterprise64bit
windows_2003_server	eq	standard64bit
windows_2003_server	eq	datacenter64bit sp1
windows_2003_server	eq	r2 sp1
windows_2003_server	eq	enterprise64bit sp1
windows_2003_server	eq	2.0.114
windows_2003_server	eq	web sp1
windows_2003_server	eq	standard sp1
windows_2003_server	eq	enterprise sp1
windows_2003_server	eq	2.0.114