CVE-2006-6696

Опубликовано: 22 дек. 2006

Источник: nvd

CVSS2: 6.9

EPSS Низкий

Описание

Double free vulnerability in Microsoft Windows 2000, XP, 2003, and Vista allows local users to gain privileges by calling the MessageBox function with a MB_SERVICE_NOTIFICATION message with crafted data, which sends a HardError message to Client/Server Runtime Server Subsystem (CSRSS) process, which is not properly handled when invoking the UserHardError and GetHardErrorText functions in WINSRV.DLL.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:sp1_beta_1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:sp1_beta_1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:sp1:*:enterprise:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:standard:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:standard:sp1_beta_1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:web:sp1_beta_1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:*:*:december_ctp:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:*:beta:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:*:beta1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:*:beta2:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*

EPSS

Процентиль: 89%

0.0432

Низкий

6.9 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-fmp2-4wcx-jwx4

github

почти 4 года назад