CVEvulnerability
CVE-2006-0020
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-01-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millennium, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute code via a crafted WMF file with a manipulated WMF header size, possibly involving an integer overflow, a different vulnerability than CVE-2005-4560, and aka "WMF Image Parsing Memory Corruption Vulnerability."
Affected configurations
• microsoft windows 2000
• microsoft windows 2003 server r2
• microsoft windows 2003 server sp1
• microsoft windows 98
• microsoft windows 98se
• microsoft windows me
• microsoft windows xp
Related
Weakness · not in database (1)
References
- http://linuxbox.org/pipermail/funsec/2006-January/002828.html Exploit, Vendor Advisory
- http://secunia.com/advisories/18729 Patch, Vendor Advisory
- http://secunia.com/advisories/18912 Vendor Advisory
- http://www.kb.cert.org/vuls/id/312956 Patch, Third Party Advisory, US Government Resource
- http://www.microsoft.com/technet/security/advisory/913333.mspx Vendor Advisory
- http://www.osvdb.org/22976 www.osvdb.org
- http://www.securityfocus.com/bid/16516 Patch
- http://www.us-cert.gov/cas/techalerts/TA06-045A.html Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2006/0469 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-004 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1638 oval.cisecurity.org
- http://linuxbox.org/pipermail/funsec/2006-January/002828.html Exploit, Vendor Advisory
- http://secunia.com/advisories/18729 Patch, Vendor Advisory
- http://secunia.com/advisories/18912 Vendor Advisory
- http://www.kb.cert.org/vuls/id/312956 Patch, Third Party Advisory, US Government Resource
- http://www.microsoft.com/technet/security/advisory/913333.mspx Vendor Advisory
- http://www.osvdb.org/22976 www.osvdb.org
- http://www.securityfocus.com/bid/16516 Patch
- http://www.us-cert.gov/cas/techalerts/TA06-045A.html Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2006/0469 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-004 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1638 oval.cisecurity.org