Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2006-2376
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2006-2376

Description:
Integer overflow in the PolyPolygon function in Graphics Rendering Engine on Microsoft Windows 98 and Me allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) or EMF image with a sum of entries in the vertext counts array and number of polygons that triggers a heap-based buffer overflow.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/26815

ST
  1016286

SREASON
  http://securityreason.com/securityalert/1094

SAID
  Secunia Advisory: SA20631

OSVDB
  26431

MS
  http://www.microsoft.com/technet/security/bulletin/ms06-026.mspx

CERT-VN
  909508

CERT
  http://www.us-cert.gov/cas/techalerts/TA06-164A.html

BUGTRAQ
  http://www.securityfocus.com/archive/1/archive/1/436950/100/0/threaded

BID
  18322


Return to the previous page.