CVEvulnerability

CVE-2006-5586

7.2 HIGH Published 2007-04-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-04-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

The Graphics Rendering Engine in Microsoft Windows 2000 SP4 and XP SP2 allows local users to gain privileges via "invalid application window sizes" in layered application windows, aka the "GDI Invalid Window Size Elevation of Privilege Vulnerability."

Affected configurations

• microsoft windows 2000 • microsoft windows xp

References