|
|
CVE Reference: CVE-2006-2376 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-2376 |
|
|
Description: Integer overflow in the PolyPolygon function in Graphics Rendering Engine on Microsoft Windows 98 and Me allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) or EMF image with a sum of entries in the vertext counts array and number of polygons that triggers a heap-based buffer overflow. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/26815 ST 1016286 SREASON http://securityreason.com/securityalert/1094 SAID Secunia Advisory: SA20631 OSVDB 26431 MS http://www.microsoft.com/technet/security/bulletin/ms06-026.mspx CERT-VN 909508 CERT http://www.us-cert.gov/cas/techalerts/TA06-164A.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/436950/100/0/threaded BID 18322 |
|
| Return to the previous page. |
