CVE-2006-0143

Microsoft Windows 2000 - Resource Management Error

Title source: rule

Description

Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a WMF file containing (1) ExtCreateRegion or (2) ExtEscape function calls with arguments with inconsistent lengths.

Exploits (1)

exploitdb WRITEUP VERIFIED

by cocoruder · textdoswindows

https://www.exploit-db.com/exploits/27051

View Code ZIP pw:eip

References (8)

[Patch] http://securitytracker.com/id?1015453

[Exploit] http://www.securityfocus.com/bid/16167

[Vendor Advisory] http://www.vupen.com/english/advisories/2006/0115

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/24044

[Various Sources] http://blogs.technet.com/msrc/archive/2006/01/09/417198.aspx

[Various Sources] http://lostmon.blogspot.com/2007/08/windows-extended-file-attributes-buffer.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/421257/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/421258/100/0/threaded

Scores

EPSS 0.7260

EPSS Percentile 98.8%

Details

CWE

CWE-399

Status published

Products (12)

microsoft/windows_2000 (5 CPE variants)

microsoft/windows_2003_server datacenter_64-bit sp1

microsoft/windows_2003_server enterprise (2 CPE variants)

microsoft/windows_2003_server enterprise_64-bit (2 CPE variants)

microsoft/windows_2003_server r2 (3 CPE variants)

microsoft/windows_2003_server standard (2 CPE variants)

microsoft/windows_2003_server standard_64-bit

microsoft/windows_2003_server web (2 CPE variants)

microsoft/windows_98

microsoft/windows_98se

... and 2 more

Published Jan 09, 2006

Tracked Since Feb 18, 2026